Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-34986 (GCVE-0-2026-34986)
Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-09-04 12:04
VLAI
EPSS
VEX
Title
Go JOSE affect by a panic in JWE decryption
Summary
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-07 14:21 UTC
Assigner
References
145 references
Impacted products
336 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| go-jose | go-jose |
Affected:
>= 4.0.0, < 4.1.4
Affected: < 3.0.5 |
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-13 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
7:5.8.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.144.0-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:165.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:52.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.1.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.18.1-3.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
6:5.4.0-15.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.144.0-2.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.39.9-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:134.1-9.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260520103055.afee755d , < *
(rpm)
Unaffected: 8100020260701102925.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:101.5-1.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
8080020260721142025.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
8080020260721142025.63b34585 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.41.8-3.el9_7 , < *
(rpm)
Unaffected: 2:1.43.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
6:5.8.2-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.144.0-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:165.1-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:52.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
2:4.4.1-22.el9_2.11 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
2:1.11.4-0.1.el9_2.6 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:1.29.7-1.el9_2.5 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:101.3-4.el9_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.33.15-1.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
4:4.9.4-20.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.14.6-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
5:5.4.0-20.el9_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.39.9-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.18.1-5.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:132.2-8.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:1.32.13-11.rhaos4.19.git089e95c.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
0:1.33.13-5.rhaos4.20.git7ebc848.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
0:1.34.11-4.rhaos4.21.git358c4b4.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101236 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
||
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101226 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
||
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101239 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
||
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1779953535 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.0 |
Unaffected:
1781192909 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
Unaffected:
1784747816 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782412815 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782392961 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1776351169 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1779135478 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1784849867 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1778892370 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778507267 , < *
(rpm)
Unaffected: 1782204403 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778507253 , < *
(rpm)
Unaffected: 1782204381 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778476004 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1782203505 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778476002 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.7 |
Unaffected:
1777360597 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.7::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778288655 , < *
(rpm)
Unaffected: 1779910504 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503377 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503196 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503297 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778288646 , < *
(rpm)
Unaffected: 1779910129 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782158798 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1778464111 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1778464072 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | Multicluster Global Hub 1.3.4 |
Unaffected:
1779212259 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.3::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1778867753 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785177359 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779770049 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779243793 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779770057 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779245274 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1780204322 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.8 |
Unaffected:
1777307791 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.8 |
Unaffected:
1776727747 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1777976489 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.9 |
Unaffected:
1777986630 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783953372 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1779579439 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1780167118 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780069381 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778696221 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778578758 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1778711679 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782185551 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1787545831 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1778152595 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1781612340 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1787008847 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779253452 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1781528081 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786759363 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786769764 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1778139790 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779775173 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779776767 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779777382 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779778558 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779775521 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779776141 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1780992173 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1780991067 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781095245 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781196942 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1785288355 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1778004922 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779258037 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779264135 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779263963 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779256521 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779260263 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779265022 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779775977 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780402732 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780402633 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780984236 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781023907 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781129269 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1784343578 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786572999 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1781010151 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1780943933 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1782879990 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049594 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049298 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049745 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049753 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049818 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049878 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049920 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049945 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778060364 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050037 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050035 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050048 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050508 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050119 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050290 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778059723 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050352 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050482 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045210 , < *
(rpm)
Unaffected: 1783676191 , < * (rpm) Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778044961 , < *
(rpm)
Unaffected: 1783929816 , < * (rpm) Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045359 , < *
(rpm)
Unaffected: 1784094353 , < * (rpm) Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045374 , < *
(rpm)
Unaffected: 1784093953 , < * (rpm) Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045891 , < *
(rpm)
Unaffected: 1784094943 , < * (rpm) Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045472 , < *
(rpm)
Unaffected: 1783676585 , < * (rpm) Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045534 , < *
(rpm)
Unaffected: 1783676649 , < * (rpm) Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045524 , < *
(rpm)
Unaffected: 1783676675 , < * (rpm) Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045587 , < *
(rpm)
Unaffected: 1784094299 , < * (rpm) Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046067 , < *
(rpm)
Unaffected: 1784094725 , < * (rpm) Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045627 , < *
(rpm)
Unaffected: 1783676820 , < * (rpm) Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045731 , < *
(rpm)
Unaffected: 1783676883 , < * (rpm) Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045700 , < *
(rpm)
Unaffected: 1783676894 , < * (rpm) Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046234 , < *
(rpm)
Unaffected: 1784095175 , < * (rpm) Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045792 , < *
(rpm)
Unaffected: 1783676977 , < * (rpm) Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045858 , < *
(rpm)
Unaffected: 1784093503 , < * (rpm) Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045945 , < *
(rpm)
Unaffected: 1783677297 , < * (rpm) Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045931 , < *
(rpm)
Unaffected: 1783677345 , < * (rpm) Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046079 , < *
(rpm)
Unaffected: 1783677533 , < * (rpm) Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079019 , < *
(rpm)
Unaffected: 1783684360 , < * (rpm) Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776706744 , < *
(rpm)
Unaffected: 1783684068 , < * (rpm) Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707205 , < *
(rpm)
Unaffected: 1784054582 , < * (rpm) Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707231 , < *
(rpm)
Unaffected: 1784054606 , < * (rpm) Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707760 , < *
(rpm)
Unaffected: 1784055295 , < * (rpm) Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707301 , < *
(rpm)
Unaffected: 1783684603 , < * (rpm) Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079295 , < *
(rpm)
Unaffected: 1783684668 , < * (rpm) Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707362 , < *
(rpm)
Unaffected: 1783684667 , < * (rpm) Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707418 , < *
(rpm)
Unaffected: 1784054873 , < * (rpm) Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707377 , < *
(rpm)
Unaffected: 1783684707 , < * (rpm) Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707947 , < *
(rpm)
Unaffected: 1784055589 , < * (rpm) Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707456 , < *
(rpm)
Unaffected: 1783684779 , < * (rpm) Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684831 , < * (rpm) Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684839 , < * (rpm) Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707945 , < *
(rpm)
Unaffected: 1784055533 , < * (rpm) Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707569 , < *
(rpm)
Unaffected: 1784055558 , < * (rpm) Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707724 , < *
(rpm)
Unaffected: 1784056134 , < * (rpm) Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707763 , < *
(rpm)
Unaffected: 1783685128 , < * (rpm) Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707771 , < *
(rpm)
Unaffected: 1783685129 , < * (rpm) Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079774 , < *
(rpm)
Unaffected: 1783685375 , < * (rpm) Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822432 , < *
(rpm)
Unaffected: 1783667125 , < * (rpm) Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403457 , < *
(rpm)
Unaffected: 1783666755 , < * (rpm) Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403991 , < *
(rpm)
Unaffected: 1784054598 , < * (rpm) Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404009 , < *
(rpm)
Unaffected: 1784055387 , < * (rpm) Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404539 , < *
(rpm)
Unaffected: 1784055726 , < * (rpm) Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404060 , < *
(rpm)
Unaffected: 1783667517 , < * (rpm) Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822689 , < *
(rpm)
Unaffected: 1783667577 , < * (rpm) Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404131 , < *
(rpm)
Unaffected: 1783667611 , < * (rpm) Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406225 , < *
(rpm)
Unaffected: 1784055020 , < * (rpm) Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406131 , < *
(rpm)
Unaffected: 1783667641 , < * (rpm) Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406770 , < *
(rpm)
Unaffected: 1784055586 , < * (rpm) Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406247 , < *
(rpm)
Unaffected: 1783667790 , < * (rpm) Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406286 , < *
(rpm)
Unaffected: 1783667859 , < * (rpm) Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667875 , < * (rpm) Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406284 , < *
(rpm)
Unaffected: 1783667869 , < * (rpm) Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667877 , < * (rpm) Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406771 , < *
(rpm)
Unaffected: 1784055576 , < * (rpm) Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406384 , < *
(rpm)
Unaffected: 1784055244 , < * (rpm) Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406540 , < *
(rpm)
Unaffected: 1784055382 , < * (rpm) Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406595 , < *
(rpm)
Unaffected: 1783668266 , < * (rpm) Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406594 , < *
(rpm)
Unaffected: 1783668288 , < * (rpm) Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775823207 , < *
(rpm)
Unaffected: 1783669219 , < * (rpm) Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786627281 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786627168 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628067 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628657 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786627792 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786698066 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786627823 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628998 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786697443 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628916 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786630412 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786629773 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786630739 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628303 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786629324 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786628605 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786631438 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786697305 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786644678 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786634168 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786633448 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786634233 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786633986 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786633677 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.21 |
Unaffected:
1786644362 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.21::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932114 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782931768 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932104 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536000 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783535989 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536515 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932521 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018461 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932812 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537001 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932919 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932969 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933015 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933042 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537392 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933235 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933251 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537955 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933417 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537742 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933602 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783019377 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934054 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934036 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934284 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776718585 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782987430 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.30 |
Unaffected:
1787756367 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.30::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.30 |
Unaffected:
1787756799 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.30::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.30 |
Unaffected:
1787764814 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.30::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
Unaffected:
1776435643 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
Unaffected:
1776435613 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
Unaffected:
1776435680 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
Unaffected:
1776185379 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.18 |
Unaffected:
1779116359 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.18::el8 |
||
| Red Hat | Red Hat OpenShift Pipelines 1.2 |
Unaffected:
1779865001 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.20::el9 |
||
| Red Hat | Red Hat OpenShift Pipelines 1.2 |
Unaffected:
1780044955 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.20::el9 |
||
| Red Hat | Red Hat OpenShift Pipelines 1.21 |
Unaffected:
cli-1.21.1 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.21::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777374598 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
||
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777319850 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151270 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776238635 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776256858 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776149682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776178280 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776178059 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151277 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1776736910 , < *
(rpm)
Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8 |
||
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1776752646 , < *
(rpm)
Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
||
| Red Hat | Red Hat Quay 3.14 |
Unaffected:
1779689392 , < *
(rpm)
cpe:/a:redhat:quay:3.14::el8 |
||
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1780891395 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
||
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
||
| Red Hat | Red Hat Quay 3.17 |
Unaffected:
1779922205 , < *
(rpm)
cpe:/a:redhat:quay:3.17::el9 |
||
| Red Hat | Red Hat Quay 3.18 |
Unaffected:
1784987273 , < *
(rpm)
cpe:/a:redhat:quay:3.18::el9 |
||
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1776782369 , < *
(rpm)
Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776339099 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776329867 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780386299 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780053572 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780046753 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780046765 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780049214 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780051354 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780052587 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Kernel Module Management Operator for Red Hat Openshift |
cpe:/a:redhat:kernel_module_management:2
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1
|
||
| Red Hat | Migration Toolkit for Virtualization |
cpe:/a:redhat:migration_toolkit_virtualization:2
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Build of Kueue |
cpe:/a:redhat:kueue_operator:1
|
||
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1
|
||
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34986",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-07T14:21:42.477191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-07T14:21:54.041Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7:5.8.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rh-podman-desktop",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-3.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.4.0-15.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:134.1-9.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260520103055.afee755d",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260701102925.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:101.5-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260721142025.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8080020260721142025.63b34585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.41.8-3.el9_7",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.8.2-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:4.4.1-22.el9_2.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.11.4-0.1.el9_2.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.29.7-1.el9_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:101.3-4.el9_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.33.15-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:4.9.4-20.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.14.6-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "5:5.4.0-20.el9_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-5.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:132.2-8.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.32.13-11.rhaos4.19.git089e95c.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.13-5.rhaos4.20.git7ebc848.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.34.11-4.rhaos4.21.git358c4b4.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101236",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101226",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779953535",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781192909",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782412815",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782392961",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776351169",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779135478",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/must-gather-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784849867",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778892370",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-controller-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778507267",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782204403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778507253",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782204381",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778476004",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782203505",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778476002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777360597",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778288655",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910504",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503196",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778288646",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/must-gather-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782158798",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778464111",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778464072",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779212259",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778867753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785177359",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779770049",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-plugin-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779243793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779770057",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-plugin-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779245274",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/submariner-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780204322",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776727747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776727747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-controller-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783953372",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779579439",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780167118",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780069381",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778696221",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778578758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778711679",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782185551",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787545831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778152595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781612340",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787008847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779253452",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781528081",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786759363",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786769764",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778139790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-catalogd-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779776767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-operator-controller-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779777382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-framework-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779778558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-registry-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779776141",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780992173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-kube-state-metrics-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780991067",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781095245",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781196942",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785288355",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778004922",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779258037",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-catalogd-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779264135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-operator-controller-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779263963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-framework-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779256521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779260263",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-registry-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779265022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780402732",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-kube-state-metrics-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780402633",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780984236",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781023907",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781129269",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784343578",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786572999",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781010151",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780943933",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782879990",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049298",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049818",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778060364",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050037",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050035",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050048",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050290",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778059723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050482",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045210",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778044961",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706101",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045359",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045374",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705646",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045891",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045472",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045534",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705777",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045524",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705802",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045587",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705938",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046067",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045627",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045731",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706177",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045700",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706188",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046234",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706679",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045792",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706357",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045858",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706612",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045931",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706659",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046079",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706880",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079019",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786701839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776706744",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786701555",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707205",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702052",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707231",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707760",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702713",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707301",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702264",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079295",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702448",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707362",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707418",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702440",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707377",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702315",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707947",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786703071",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707456",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702563",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702636",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702623",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786703137",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707569",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702716",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707724",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702872",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707763",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702949",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786702917",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079774",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786703143",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822432",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627460",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403457",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786626399",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403991",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404009",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404539",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629761",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404060",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822689",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786687918",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629478",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406225",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628142",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786631508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406770",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628053",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406247",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406286",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627430",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629076",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406284",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627469",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786644072",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786688215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406384",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628340",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406540",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628623",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406595",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786632256",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406594",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628935",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775823207",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629548",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627281",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627168",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628067",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628657",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786698066",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786627823",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628998",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786697443",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628916",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786630412",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629773",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786630739",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628303",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786629324",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786628605",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786631438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786697305",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-lightspeed-rag-content-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786644678",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786634168",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786633448",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786634233",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786633986",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786633677",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786644362",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782931768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932104",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536000",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783535989",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932969",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-drbd-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933417",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933602",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783019377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-mover-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934054",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776718585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-base-rhel10",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782987430",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.30::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/oauth2-proxy-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.30",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787756367",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.30::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.30",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787756799",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.30::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.30",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787764814",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435643",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435613",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776185379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779116359",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779865001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-operator-bundle",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780044955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.21::el9"
],
"defaultStatus": "affected",
"packageName": "serve-tkn-cli-1-21-serve-tkn",
"product": "Red Hat OpenShift Pipelines 1.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "cli-1.21.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777374598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777319850",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151270",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776238635",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776256858",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776149682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776178280",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776178059",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151277",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776736910",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779822261",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776752646",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779811412",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779689392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780891395",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779922205",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.18::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784987273",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776782369",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779811473",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/client-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776339099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/cosign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776329867",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780386299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-monitor-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780046753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fulcio-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780046765",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-backfill-redis-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/timestamp-authority-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051354",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fetch-tsa-certs-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051354",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/gitsign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780052587",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "assisted/agent-preinstall-image-builder-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-controller-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-operator-bundle",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-operator-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-must-gather-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/bitwarden-sdk-server-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-operator-bundle",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-operator-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:kernel_module_management:2"
],
"defaultStatus": "affected",
"packageName": "kmm/kernel-module-management-must-gather-rhel9",
"product": "Kernel Module Management Operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-operator-bundle",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/opa-openshift-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-must-gather-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-log-reader-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-must-gather-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-must-gather-rhel8",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "mtv-candidate/mtv-must-gather-rhel8",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-aws-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/image-based-install-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-jenkins",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-cache-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-cli-tkn-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-opc-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-api-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-rhel9-operator",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-sidecarlogresults-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-kafka-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-channel-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-filter-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-ingress-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-jobsink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-mtping-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-webhook-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/serverless-must-gather-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-must-gather-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-must-gather-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-must-gather-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-state-metrics-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/submariner-operator-bundle",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/aap-must-gather-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/aap-must-gather-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-on-clouds/aoc-azure-aap-installer-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:kueue_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "kueue/kueue-must-gather-rhel9",
"product": "Red Hat Build of Kueue",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-macos-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-windows-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-must-gather-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-compare-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/lifecycle-agent-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/network-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/numaresources-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-api-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-pod-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-baremetal-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-shared-resource-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-deployer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-helm-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-local-storage-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-machine-os-images-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ovn-kubernetes-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-secrets-store-csi-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tests-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ptp-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-kni/commatrix",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "redhat/redhat-operator-index",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/udi-base-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-agent-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/must-gather-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-operator-bundle",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/clair-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/clair-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unaffected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/ec-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unaffected",
"packageName": "rhtas/model-transparency-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9-operator",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-operator-bundle",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-06T16:22:45.353Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-04T12:04:52.839Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"name": "RHBZ#2455470",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17789"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60452"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60444"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60449"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20569"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16696"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33722"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35833"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48790"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25252"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25248"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34192"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:32991"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34196"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20607"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26054"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26636"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57590"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22423"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60023"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57487"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27001"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57408"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27004"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48676"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17468"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44267"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21709"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23241"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20034"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17474"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34794"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25206"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21932"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21931"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11688"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17550"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56431"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56366"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12279"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56968"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12277"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57013"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22629"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22465"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48085"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22840"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23361"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11996"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24475"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24479"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24477"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24471"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19108"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12116"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17459"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17458"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11512"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22258"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17121"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22260"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18585"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:60452: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:60444: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:60449: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:48790: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
},
{
"lang": "en",
"value": "RHSA-2026:57590: Red Hat Enterprise Linux Extensions Channel (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:57408: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:48676: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
},
{
"lang": "en",
"value": "RHSA-2026:20946: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:56968: Red Hat Openshift Data Foundation 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:11856: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:22629: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:21017: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:24853: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:22465: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:48085: Red Hat Quay 3.18"
},
{
"lang": "en",
"value": "RHSA-2026:11916: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:22840: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:23361: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:11996: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:19108: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:12116: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:19099: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:28198: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17459: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17458: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:11512: multicluster engine for Kubernetes 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:17123: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22258: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:17121: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22260: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:18584: multicluster engine for Kubernetes 2.9"
},
{
"lang": "en",
"value": "RHSA-2026:18585: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-06T17:01:34.639Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-06T16:22:45.353Z",
"value": "Made public."
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "go-jose",
"vendor": "go-jose",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.0.0, \u003c 4.1.4"
},
{
"status": "affected",
"version": "\u003c 3.0.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-06T16:22:45.353Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"tags": [
"x_refsource_MISC"
],
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"source": {
"advisory": "GHSA-78h2-9frx-2jm8",
"discovery": "UNKNOWN"
},
"title": "Go JOSE affect by a panic in JWE decryption"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-34986",
"datePublished": "2026-04-06T16:22:45.353Z",
"dateReserved": "2026-03-31T19:38:31.617Z",
"dateUpdated": "2026-09-04T12:04:52.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34986",
"date": "2026-09-06",
"epss": "0.00651",
"percentile": "0.48917"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34986\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-06T17:17:11.870\",\"lastModified\":\"2026-09-04T13:19:27.380\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"go-jose\",\"product\":\"go-jose\",\"versions\":[{\"version\":\"\u003e= 4.0.0, \u003c 4.1.4\",\"status\":\"affected\"},{\"version\":\"\u003c 3.0.5\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"7:5.8.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:165.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:52.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-podman-desktop\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.1.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.18.1-3.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"6:5.4.0-15.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.39.9-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:134.1-9.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260520103055.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"8100020260701102925.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:101.5-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"8080020260721142025.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"8080020260721142025.63b34585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.41.8-3.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"2:1.43.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"6:5.8.2-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:165.1-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:52.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"2:4.4.1-22.el9_2.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"2:1.11.4-0.1.el9_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:1.29.7-1.el9_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:101.3-4.el9_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.33.15-1.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"4:4.9.4-20.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.14.6-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"5:5.4.0-20.el9_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.39.9-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.18.1-5.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:132.2-8.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"0:1.32.13-11.rhaos4.19.git089e95c.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"0:1.33.13-5.rhaos4.20.git7ebc848.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"0:1.34.11-4.rhaos4.21.git358c4b4.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101236\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101226\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1779953535\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1781192909\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782412815\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782392961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1776351169\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1779135478\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784849867\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1778892370\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778507267\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782204403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778507253\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782204381\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778476004\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1782203505\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1778476002\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.7::el9\"],\"versions\":[{\"version\":\"1777360597\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el8\"],\"versions\":[{\"version\":\"1778288655\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779910504\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503196\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778288646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779910129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782158798\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el8\"],\"versions\":[{\"version\":\"1778464111\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1778464072\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"],\"versions\":[{\"version\":\"1779212259\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1778867753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785177359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779770049\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779243793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779770057\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779245274\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/submariner-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1780204322\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1776727747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1776727747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783953372\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1779579439\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1780167118\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780069381\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778696221\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778578758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1778711679\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782185551\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1787545831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1778152595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1781612340\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1787008847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779253452\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1781528081\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-azure-workload-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786759363\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786769764\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1778139790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779775173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-catalogd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779776767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779777382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-framework-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779778558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-lifecycle-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779775521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779776141\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1780992173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1780991067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781095245\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/oc-mirror-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781196942\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-azure-workload-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1785288355\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1778004922\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779258037\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-catalogd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779264135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779263963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-framework-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779256521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-lifecycle-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779260263\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779265022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779775977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780402732\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780402633\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/oc-mirror-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780984236\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781023907\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-installer-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781129269\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-azure-workload-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1784343578\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ovn-kubernetes-microshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786572999\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-installer-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1781010151\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1780943933\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-node-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1782879990\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049298\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049818\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778060364\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050037\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050035\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050048\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050290\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778059723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050482\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045210\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778044961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706101\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045374\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045534\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705777\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045524\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705802\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045587\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786705938\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045731\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706177\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706188\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046234\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706679\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706357\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706612\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045931\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706659\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786706880\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079019\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786701839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776706744\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786701555\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702052\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707231\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707760\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702713\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702264\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702448\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707418\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702440\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702315\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707947\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786703071\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707456\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702563\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702636\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702623\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786703137\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707569\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702716\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707724\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702872\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707763\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702949\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786702917\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786703143\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822432\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627460\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403457\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786626399\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403991\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404009\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786629761\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404060\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786687918\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786629478\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628142\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786631508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406770\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628053\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406247\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406286\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627430\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786629076\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786627469\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786644072\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786688215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406384\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628340\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406540\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628623\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786632256\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786628935\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775823207\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1786629548\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786627281\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786627168\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628657\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786627792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786698066\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786627823\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628998\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786697443\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628916\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786630412\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786629773\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786630739\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628303\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786629324\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786628605\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786631438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786697305\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-lightspeed-rag-content-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786644678\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786634168\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786633448\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786634233\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786633986\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786633677\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"],\"versions\":[{\"version\":\"1786644362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782931768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932104\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536000\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783535989\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932969\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-drbd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933417\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933602\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783019377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-mover-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934054\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776718585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-base-rhel10\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782987430\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.30\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/oauth2-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"],\"versions\":[{\"version\":\"1787756367\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.30\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"],\"versions\":[{\"version\":\"1787756799\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.30\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"],\"versions\":[{\"version\":\"1787764814\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435643\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435613\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776185379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"],\"versions\":[{\"version\":\"1779116359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"],\"versions\":[{\"version\":\"1779865001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-pipelines/pipelines-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"],\"versions\":[{\"version\":\"1780044955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"serve-tkn-cli-1-21-serve-tkn\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.21::el9\"],\"versions\":[{\"version\":\"cli-1.21.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777374598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777319850\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151270\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776238635\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776256858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776149682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776178280\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776178059\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151277\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1776736910\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779822261\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1776752646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779811412\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"],\"versions\":[{\"version\":\"1779689392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1780891395\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"],\"versions\":[{\"version\":\"1779922205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.18::el9\"],\"versions\":[{\"version\":\"1784987273\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1776782369\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779811473\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/client-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776339099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/cosign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776329867\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rhtas-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780386299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780046753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fulcio-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780046765\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-backfill-redis-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/timestamp-authority-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780051354\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fetch-tsa-certs-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780051354\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/gitsign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780052587\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"assisted/agent-preinstall-image-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-istio-csr-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-acmesolver-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/bitwarden-sdk-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Kernel Module Management Operator for Red Hat Openshift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kmm/kernel-module-management-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:kernel_module_management:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/loki-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/loki-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/opa-openshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-log-reader-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"migration-toolkit-virtualization/mtv-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mtv-candidate/mtv-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-aws-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/image-based-install-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-agent-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-jenkins\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/openshift-mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-cache-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-chains-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-cli-tkn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-opc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-sidecarlogresults-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-dispatcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-kafka-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-receiver-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-channel-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-filter-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-ingress-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-jobsink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-mtping-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/serverless-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/power-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-multicluster-observability-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/submariner-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/aap-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/aap-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-on-clouds/aoc-azure-aap-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Kueue\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kueue/kueue-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:kueue_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-macos-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-windows-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-compare-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/lifecycle-agent-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/network-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/numaresources-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-api-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-csr-approver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-orchestrator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-cluster-api-controllers-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-pod-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-baremetal-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-shared-resource-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-deployer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-helm-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-local-storage-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-os-images-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ovn-kubernetes-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-secrets-store-csi-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tests-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ptp-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kni/commatrix\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat/redhat-operator-index\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/mcg-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-cloner-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-importer-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-uploadproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-uploadserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/prometheus-podman-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/clair-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/clair-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/ec-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/model-transparency-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/policy-controller-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-07T14:21:42.477191Z\",\"id\":\"CVE-2026-34986\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-248\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-131\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.5\",\"matchCriteriaId\":\"C8F16FC9-40BA-4C17-9ABD-614143E86BFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.1.4\",\"matchCriteriaId\":\"DC2FEC8C-1ECF-40EA-A074-86B4C7688B60\"}]}]}],\"references\":[{\"url\":\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\",\"Technical Description\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10130\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11070\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11512\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11688\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11996\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12116\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12279\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16696\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17121\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17458\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17459\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17468\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17474\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17550\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17789\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19108\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20034\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20569\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20607\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21709\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21931\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21932\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22258\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22260\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22423\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22465\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22629\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22840\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23241\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23361\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24471\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24475\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24477\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24479\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25206\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25248\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25252\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26054\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26636\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27001\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27004\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28198\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:32991\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33722\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34192\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34196\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34794\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35833\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44267\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48085\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48676\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48790\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54602\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56366\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56431\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56968\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57013\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57408\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57487\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57590\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60023\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60444\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60449\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60452\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:62260\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9453\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-34986\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2455470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-09-06T16:34:21+00:00",
"cve": "CVE-2026-34986",
"id": "CVE-2026-34986",
"initial_release_date": "2026-04-06T16:22:45.353000+00:00",
"product_status:fixed": "2805",
"product_status:known_affected": "152",
"product_status:known_not_affected": "15283",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-08-31T17:17:40Z",
"cve": "CVE-2026-34986",
"id": "CVE-2026-34986",
"initial_release_date": "2026-04-11T09:23:46Z",
"product_status:known_affected": "808",
"product_status:known_not_affected": "132",
"product_status:recommended": "549",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-34986",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-34986.json",
"version": "51"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7:5.8.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-podman-desktop\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-3.el10_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.4.0-15.el10_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:134.1-9.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260520103055.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"8100020260701102925.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:101.5-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8080020260721142025.63b34585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8080020260721142025.63b34585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.41.8-3.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"2:1.43.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.8.2-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:4.4.1-22.el9_2.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.11.4-0.1.el9_2.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.29.7-1.el9_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:101.3-4.el9_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.33.15-1.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:4.9.4-20.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.14.6-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"5:5.4.0-20.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-5.el9_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:132.2-8.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.32.13-11.rhaos4.19.git089e95c.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-o\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.33.13-5.rhaos4.20.git7ebc848.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-o\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.34.11-4.rhaos4.21.git358c4b4.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-o\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101236\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101226\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779953535\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781192909\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782412815\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782392961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776351169\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779135478\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784849867\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778892370\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778507267\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782204403\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778507253\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782204381\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778476004\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782203505\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778476002\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777360597\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778288655\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779910504\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503196\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778288646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779910129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782158798\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778464111\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778464072\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779212259\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778867753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785177359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779770049\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779243793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779770057\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779245274\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780204322\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/submariner-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776727747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776727747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783953372\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779579439\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780167118\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780069381\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778696221\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778578758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778711679\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782185551\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787545831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778152595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781612340\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787008847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779253452\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781528081\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786759363\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-azure-workload-identity-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786769764\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778139790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779776767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-catalogd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779777382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-operator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779778558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-framework-tools-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-lifecycle-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779776141\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780992173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780991067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-kube-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781095245\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-machine-config-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781196942\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/oc-mirror-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785288355\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-azure-workload-identity-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778004922\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779258037\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-machine-config-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779264135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-catalogd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779263963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-operator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779256521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-framework-tools-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779260263\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-lifecycle-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779265022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780402732\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780402633\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-kube-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780984236\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/oc-mirror-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781023907\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781129269\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-installer-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784343578\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-azure-workload-identity-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786572999\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ovn-kubernetes-microshift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781010151\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-installer-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780943933\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782879990\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-node-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049298\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049818\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778060364\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050037\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050035\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050048\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050290\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778059723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050482\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045210\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676191\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778044961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783929816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706101\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045374\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784093953\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094943\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045534\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676649\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705777\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045524\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705802\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045587\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786705938\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094725\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676820\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045731\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706177\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706188\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046234\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784095175\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706679\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706357\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784093503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706612\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045931\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677345\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706659\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786706880\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079019\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684360\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786701839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776706744\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684068\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786701555\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702052\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707231\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707760\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702713\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684603\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702264\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684668\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702448\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684667\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707418\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702440\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702315\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707947\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786703071\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707456\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684779\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702563\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702636\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702623\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786703137\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707569\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702716\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707724\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784056134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707763\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685128\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702949\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786702917\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685375\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786703143\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822432\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627460\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403457\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786626399\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403991\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404009\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786629761\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404060\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786687918\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786629478\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628142\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786631508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406770\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628053\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406247\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406286\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627430\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786629076\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786627469\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786644072\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786688215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406384\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628340\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406540\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628623\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786632256\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786628935\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775823207\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1786629548\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786627281\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786627168\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628657\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786627792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786698066\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786627823\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628998\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786697443\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628916\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786630412\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786629773\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786630739\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628303\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786629324\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786628605\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786631438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786697305\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786644678\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-lightspeed-rag-content-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786634168\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786633448\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786634233\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786633986\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786633677\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786644362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782931768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932104\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536000\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783535989\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932969\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-drbd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933417\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933602\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783019377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934054\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-mover-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776718585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782987430\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-base-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.30\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787756367\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/oauth2-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.30\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787756799\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.30::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.30\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787764814\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435643\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435613\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-query-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776185379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779116359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779865001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780044955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-pipelines/pipelines-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"cli-1.21.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"serve-tkn-cli-1-21-serve-tkn\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777374598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777319850\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151270\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776238635\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776256858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776149682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776178280\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776178059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151277\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776736910\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779822261\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776752646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779811412\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779689392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780891395\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779922205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784987273\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776782369\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779811473\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776339099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/client-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776329867\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/cosign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780386299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rhtas-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780046753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780046765\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fulcio-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-backfill-redis-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051354\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/timestamp-authority-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051354\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fetch-tsa-certs-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780052587\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/gitsign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"assisted/agent-preinstall-image-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-istio-csr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-acmesolver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/bitwarden-sdk-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:kernel_module_management:2\"], \"vendor\": \"Red Hat\", \"product\": \"Kernel Module Management Operator for Red Hat Openshift\", \"packageName\": \"kmm/kernel-module-management-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/loki-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/loki-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/opa-openshift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-log-reader-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"migration-toolkit-virtualization/mtv-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"mtv-candidate/mtv-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-aws-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hypershift-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/image-based-install-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-agent-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"openshift4/ose-jenkins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/openshift-mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-cache-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-chains-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-cli-tkn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-opc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-watcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-sidecarlogresults-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-dispatcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-kafka-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-receiver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-channel-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-filter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-ingress-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-jobsink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-mtping-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/serverless-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/power-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-multicluster-observability-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/kube-state-metrics-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/submariner-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/aap-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/aap-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-on-clouds/aoc-azure-aap-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:kueue_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Kueue\", \"packageName\": \"kueue/kueue-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-macos-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-windows-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"lvms4/lvms-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-compare-artifacts-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/lifecycle-agent-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/network-tools-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/numaresources-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-api-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-csr-approver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-orchestrator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-cluster-api-controllers-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-pod-identity-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-baremetal-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli-artifacts-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-shared-resource-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-deployer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-helm-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-local-storage-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-os-images-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ovn-kubernetes-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-secrets-store-csi-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tests-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tools-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ptp-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kni/commatrix\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"redhat/redhat-operator-index\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/mcg-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-cloner-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-importer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-uploadproxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-uploadserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/prometheus-podman-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/clair-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/clair-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/ec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/model-transparency-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/policy-controller-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-06T17:01:34.639Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-06T16:22:45.353Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:17789: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60452: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60444: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60449: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48790: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26636: Custom Metric Autoscaler 2.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57590: Red Hat Enterprise Linux Extensions Channel (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging Subsystem for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22423: Multicluster Global Hub 1.3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24977: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57408: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48676: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20946: Red Hat OpenShift GitOps 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56968: Red Hat Openshift Data Foundation 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57013: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11856: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22629: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21017: Red Hat Quay 3.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24853: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22465: Red Hat Quay 3.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48085: Red Hat Quay 3.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11916: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22840: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23361: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11996: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19108: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12116: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19099: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28198: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17459: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17458: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11512: multicluster engine for Kubernetes 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17123: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22258: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17121: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22260: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18584: multicluster engine for Kubernetes 2.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18585: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-06T16:22:45.353Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-34986\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2455470\", \"name\": \"RHBZ#2455470\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17789\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60452\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60444\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60449\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20569\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16696\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22450\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35833\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48790\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25252\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25248\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25250\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34192\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:32991\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34196\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20607\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26054\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19186\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23228\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19353\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26636\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22423\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25127\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11070\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24977\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60023\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34099\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17598\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57487\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27001\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57408\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27004\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27063\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48676\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17468\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21709\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23241\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27044\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20034\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54602\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17474\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34794\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25206\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10175\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:62260\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24484\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21932\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21931\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11688\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8490\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9453\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8491\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17550\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56431\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56366\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12279\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56968\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12277\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57013\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22629\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22465\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48085\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11916\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22840\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23361\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11996\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10130\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24475\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24482\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24479\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24477\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24471\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19108\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12116\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19099\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28198\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17459\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17458\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11512\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22258\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17121\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22260\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-131\", \"description\": \"Incorrect Calculation of Buffer Size\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-09-04T12:04:52.839Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34986\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-07T14:21:42.477191Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-07T14:21:49.130Z\"}}], \"cna\": {\"title\": \"Go JOSE affect by a panic in JWE decryption\", \"source\": {\"advisory\": \"GHSA-78h2-9frx-2jm8\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"go-jose\", \"product\": \"go-jose\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 4.0.0, \u003c 4.1.4\"}, {\"status\": \"affected\", \"version\": \"\u003c 3.0.5\"}]}], \"references\": [{\"url\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"name\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"name\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-248\", \"description\": \"CWE-248: Uncaught Exception\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-06T16:22:45.353Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-34986\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-04T12:04:52.839Z\", \"dateReserved\": \"2026-03-31T19:38:31.617Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-06T16:22:45.353Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:60452
Vulnerability from csaf_redhat - Published: 2026-09-02 19:39 - Updated: 2026-09-06 14:27Summary
Red Hat Security Advisory: OpenShift Container Platform 4.19.45 packages and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.19.45 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.19.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.19.45. See the following advisory for the container images for
this release:
https://access.redhat.com/errata/RHSA-2026:60454
Security Fix(es):
* github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd
Injection via HOME env (CVE-2026-15809)
* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE:
Denial of Service via crafted JSON Web Encryption (JWE) object
(CVE-2026-34986)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
7.8 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
17 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.19.45 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 4.19.45. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHSA-2026:60454\n\nSecurity Fix(es):\n\n* github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 \u2014 /etc/passwd\nInjection via HOME env (CVE-2026-15809)\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE:\nDenial of Service via crafted JSON Web Encryption (JWE) object\n(CVE-2026-34986)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:60452",
"url": "https://access.redhat.com/errata/RHSA-2026:60452"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "2500846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500846"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60452.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.45 packages and security update",
"tracking": {
"current_release_date": "2026-09-06T14:27:59+00:00",
"generator": {
"date": "2026-09-06T14:27:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:60452",
"initial_release_date": "2026-09-02T19:39:39+00:00",
"revision_history": [
{
"date": "2026-09-02T19:39:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-02T19:39:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T14:27:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.19",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"product": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"product_id": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-11.rhaos4.19.git089e95c.el9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_id": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-11.rhaos4.19.git089e95c.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_id": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-11.rhaos4.19.git089e95c.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_id": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-11.rhaos4.19.git089e95c.el9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_id": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-11.rhaos4.19.git089e95c.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_id": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-11.rhaos4.19.git089e95c.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_id": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-11.rhaos4.19.git089e95c.el9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_id": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-11.rhaos4.19.git089e95c.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_id": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-11.rhaos4.19.git089e95c.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_id": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-11.rhaos4.19.git089e95c.el9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_id": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-11.rhaos4.19.git089e95c.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_id": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-11.rhaos4.19.git089e95c.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_id": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-11.rhaos4.19.git089e95c.el9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64"
},
"product_reference": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le"
},
"product_reference": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x"
},
"product_reference": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src"
},
"product_reference": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
},
"product_reference": "cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64"
},
"product_reference": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le"
},
"product_reference": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x"
},
"product_reference": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
},
"product_reference": "cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Neboj\u0161a Ja\u0107ovi\u0107"
],
"organization": "Independent Security Researcher"
}
],
"cve": "CVE-2026-15809",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"discovery_date": "2026-07-15T09:58:08.982000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 \u2014 /etc/passwd Injection via HOME env",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in CRI-O allows for arbitrary line injection into a container\u0027s `/etc/passwd` file. An attacker capable of setting container environment variables can bypass a previous fix (CVE-2022-4318) by supplying a real newline character in the `HOME` environment variable, potentially leading to privilege escalation within the affected container. This risk is present in environments where untrusted users can influence container environment variable settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15809"
},
{
"category": "external",
"summary": "RHBZ#2500846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15809",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15809"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15809",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15809"
},
{
"category": "external",
"summary": "https://github.com/cri-o/cri-o/pull/6450",
"url": "https://github.com/cri-o/cri-o/pull/6450"
},
{
"category": "external",
"summary": "https://github.com/cri-o/cri-o/pull/6524",
"url": "https://github.com/cri-o/cri-o/pull/6524"
}
],
"release_date": "2026-07-15T10:18:17.941000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-02T19:39:39+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/",
"product_ids": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:60452"
},
{
"category": "workaround",
"details": "Restrict access to users who can create or modify container workloads through appropriate RBAC permissions, apply security controls such as Security Context Constraints (SCCs) to limit privilege escalation, and enforce policies to run containers with reduced privileges (for example, as non-root) to reduce the impact of potential exploitation. Enable SELinux on affected nodes and consider admission controls to prevent potentially unsafe workload configurations.",
"product_ids": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 \u2014 /etc/passwd Injection via HOME env"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-02T19:39:39+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/",
"product_ids": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:60452"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-11.rhaos4.19.git089e95c.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:62260
Vulnerability from csaf_redhat - Published: 2026-09-01 18:22 - Updated: 2026-09-06 14:56Summary
Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.
Severity
Important
Notes
Topic: Red Hat OpenShift Dev Spaces 3.30.0 has been released.
Details: Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Parsson. The JSON parser did not enforce a default maximum on the number of characters consumed while processing a single JSON document. A remote attacker could exploit this by providing a very large, specially crafted JSON document. This could force applications to consume excessive CPU and memory, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain characters, leading to a weakness in how passwords are processed. A remote attacker could exploit this by crafting a specific password that generates the same internal hash as a legitimate user's password, thereby bypassing authentication and gaining unauthorized access to the victim's account.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.
5.3 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server's domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker's account on that service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service (DoS) condition where the affected server or client may crash or run out of resources.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the "type" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by providing specially crafted property path strings to the MappingContext property path resolution. This can lead to resource exhaustion, resulting in a denial of service (DoS) for affected applications.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Spring Data Commons. An attacker can exploit this vulnerability by sending repeated requests with specially crafted strings, which are then permanently retained in the internal property-lookup cache. This can lead to heap exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high memory consumption and potential application crashes. This can impact the availability of systems using the library.
6.5 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifically the first few bytes of file content. Additionally, this vulnerability may be exploited to cause a Denial of Service (DoS) by targeting large files, making the system unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Moderate
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `@nevware21/ts-utils` library. This vulnerability allows a remote attacker to manipulate the fundamental properties of objects within an application. By exploiting this, an attacker could potentially execute unauthorized code, leading to a complete compromise of the application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the StripPrefix middleware, allowing an unauthenticated attacker to bypass route-level authentication and authorization. By crafting a request path containing '..' or its percent-encoded form, an attacker can access protected backend paths, such as administrative or internal configuration endpoints, without proper authentication. This could lead to unauthorized information disclosure or modification of sensitive settings.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in @grpc/grpc-js, a pure JavaScript gRPC client and server library. An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This vulnerability affects all servers created using @grpc/grpc-js, and no workaround is available. An unauthenticated remote attacker can exploit this to cause a denial of service by sending a malformed HTTP/2 stream to a gRPC server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability allows an unauthenticated client to bypass mutual Transport Layer Security (TLS) enforcement, a security measure that verifies both client and server identities. The bypass occurs due to an issue in Traefik's domain-fronting protection (SNICheck), which incorrectly processes TLS options for HTTP Host headers. As a result, an attacker can gain unauthorized access to protected backend services without presenting a required client certificate.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `<template>.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection allows unauthenticated clients to bypass router-specific mutual Transport Layer Security (mTLS) enforcement. When HTTP/3 is enabled and a router uses wildcard host rules or case-insensitive hostname matching with client certificate authentication, an attacker can complete the QUIC handshake without presenting a certificate. This bypass grants unauthorized access to a backend that should be protected by mTLS.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or excessive header length.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size limit is applied. This can lead to the affected system becoming unresponsive.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. The BasicAuth, DigestAuth, and ForwardAuth middlewares in Traefik do not correctly treat underscore-variant header names. This allows a remote attacker to inject a specially crafted header that bypasses Traefik's security mechanisms. As a result, the attacker can spoof identity or authorization context to the backend, potentially gaining unauthorized access to protected resources.
10.0 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary metrics, including critical system or business metrics, and the injection of false log entries, potentially impacting monitoring and auditing systems.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Moderate
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an untrusted client could set internal or privileged components from external input, potentially leading to unauthorized modification or disclosure of sensitive data.
6.5 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Moderate
A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik. An unauthenticated remote attacker can bypass authentication due to a path traversal vulnerability in the ReplacePathRegex middleware. When this middleware is misconfigured, it forwards un-normalized paths, allowing a backend to resolve them to protected routes and grant unauthorized access. This bypass enables access to sensitive administrative interfaces.
10.0 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Low
A flaw was found in Traefik, a cloud-native edge router. A low-privileged user in a Kubernetes environment could exploit a namespace confusion vulnerability within the Kubernetes Gateway API provider. This flaw allows an attacker to bypass security controls by incorrectly binding a Traefik Middleware from a different namespace, potentially leading to the injection of trusted identity headers into network requests. This could result in unauthorized access or privilege escalation within the Kubernetes cluster.
9.6 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the `filesFilter` function can lead to a stack overflow. This issue results in a denial of service (DoS) by terminating Node.js applications that consume these archives.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted `sourceMappingURL` values in untrusted CSS files. This allows the attacker to disclose sensitive `sourcesContent` from arbitrary `.map` files accessible on the system, leading to information disclosure.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during IN_PLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of malicious scripts even after the HTML appears to be sanitized, leading to potential information disclosure or unauthorized actions.
7.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 | — |
Vendor Fix
fix
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 | — |
Threats
Impact
Important
References
539 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Dev Spaces 3.30.0 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. \nThe 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. \nUsers still using the v1 standard should migrate as soon as possible. \nhttps://devfile.io/docs/2.2.0/migrating-to-devfile-v2 \nDev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. \nhttps://access.redhat.com/support/policy/updates/openshift#crw",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:62260",
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.30/html/administration_guide/installing-devspaces",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.30/html/administration_guide/installing-devspaces"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-55163",
"url": "https://access.redhat.com/security/cve/CVE-2025-55163"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10050",
"url": "https://access.redhat.com/security/cve/CVE-2026-10050"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10051",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15075",
"url": "https://access.redhat.com/security/cve/CVE-2026-15075"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15076",
"url": "https://access.redhat.com/security/cve/CVE-2026-15076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40898",
"url": "https://access.redhat.com/security/cve/CVE-2026-40898"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40983",
"url": "https://access.redhat.com/security/cve/CVE-2026-40983"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40984",
"url": "https://access.redhat.com/security/cve/CVE-2026-40984"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41242",
"url": "https://access.redhat.com/security/cve/CVE-2026-41242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41695",
"url": "https://access.redhat.com/security/cve/CVE-2026-41695"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41716",
"url": "https://access.redhat.com/security/cve/CVE-2026-41716"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44705",
"url": "https://access.redhat.com/security/cve/CVE-2026-44705"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45149",
"url": "https://access.redhat.com/security/cve/CVE-2026-45149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45416",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45623",
"url": "https://access.redhat.com/security/cve/CVE-2026-45623"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45674",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46681",
"url": "https://access.redhat.com/security/cve/CVE-2026-46681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47691",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48020",
"url": "https://access.redhat.com/security/cve/CVE-2026-48020"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48068",
"url": "https://access.redhat.com/security/cve/CVE-2026-48068"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48491",
"url": "https://access.redhat.com/security/cve/CVE-2026-48491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-49978",
"url": "https://access.redhat.com/security/cve/CVE-2026-49978"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50010",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50193",
"url": "https://access.redhat.com/security/cve/CVE-2026-50193"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53622",
"url": "https://access.redhat.com/security/cve/CVE-2026-53622"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54399",
"url": "https://access.redhat.com/security/cve/CVE-2026-54399"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54428",
"url": "https://access.redhat.com/security/cve/CVE-2026-54428"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54512",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54513",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54763",
"url": "https://access.redhat.com/security/cve/CVE-2026-54763"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55831",
"url": "https://access.redhat.com/security/cve/CVE-2026-55831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55833",
"url": "https://access.redhat.com/security/cve/CVE-2026-55833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56745",
"url": "https://access.redhat.com/security/cve/CVE-2026-56745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56746",
"url": "https://access.redhat.com/security/cve/CVE-2026-56746"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56819",
"url": "https://access.redhat.com/security/cve/CVE-2026-56819"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59296",
"url": "https://access.redhat.com/security/cve/CVE-2026-59296"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59873",
"url": "https://access.redhat.com/security/cve/CVE-2026-59873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59874",
"url": "https://access.redhat.com/security/cve/CVE-2026-59874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59877",
"url": "https://access.redhat.com/security/cve/CVE-2026-59877"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59888",
"url": "https://access.redhat.com/security/cve/CVE-2026-59888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59899",
"url": "https://access.redhat.com/security/cve/CVE-2026-59899"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-65600",
"url": "https://access.redhat.com/security/cve/CVE-2026-65600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-65601",
"url": "https://access.redhat.com/security/cve/CVE-2026-65601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67213",
"url": "https://access.redhat.com/security/cve/CVE-2026-67213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67214",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-68494",
"url": "https://access.redhat.com/security/cve/CVE-2026-68494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69153",
"url": "https://access.redhat.com/security/cve/CVE-2026-69153"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73086",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73566",
"url": "https://access.redhat.com/security/cve/CVE-2026-73566"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73646",
"url": "https://access.redhat.com/security/cve/CVE-2026-73646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75838",
"url": "https://access.redhat.com/security/cve/CVE-2026-75838"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-8286",
"url": "https://access.redhat.com/security/cve/CVE-2026-8286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9547",
"url": "https://access.redhat.com/security/cve/CVE-2026-9547"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9563",
"url": "https://access.redhat.com/security/cve/CVE-2026-9563"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62260.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.",
"tracking": {
"current_release_date": "2026-09-06T14:56:09+00:00",
"generator": {
"date": "2026-09-06T14:56:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:62260",
"initial_release_date": "2026-09-01T18:22:22+00:00",
"revision_history": [
{
"date": "2026-09-01T18:22:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T14:56:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces 3.30",
"product": {
"name": "Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3.30::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1787762793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1787762385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1787756267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1787760821"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1787686214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1787761748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Af7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1787764643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1787756367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1787759145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1787756322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-operator-bundle@sha256%3A3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle\u0026tag=1787781541"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1787759723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1787757597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1787756799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3Aee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1787764814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1787761537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1787761882"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1787762793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Aaf4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1787762385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3Ab2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1787756267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1787760821"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1787686214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1787761748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1787764643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3Aaf08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1787756367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Aa4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1787759145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Ad98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1787756322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1787759723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1787757597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Ab338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1787756799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3Abde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1787764814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ab0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1787761537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1787761882"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1787762793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1787762385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1787756267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1787760821"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3Ac722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1787686214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1787761748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1787764643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1787756367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1787759145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Acd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1787756322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Af74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1787759723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1787757597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1787756799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1787764814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1787761537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3Aeaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1787761882"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Ae576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1787762793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Abce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1787762385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3Ab3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1787756267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3Aca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1787760821"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1787686214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1787761748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Af69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1787764643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"product": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"product_id": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9\u0026tag=1787756367"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ab73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1787759145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1787756322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1787759723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1787757597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Aba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1787756799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1787764814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1787761537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1787761882"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x"
},
"product_reference": "registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30",
"product_id": "Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.30"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-55163",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-08-13T15:01:55.372237+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2388252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-55163"
},
{
"category": "external",
"summary": "RHBZ#2388252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
"url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/767506",
"url": "https://kb.cert.org/vuls/id/767506"
}
],
"release_date": "2025-08-13T14:17:36.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
},
{
"cve": "CVE-2026-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-03T07:01:27.043110+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496763"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Insecure connection establishment due to TLS configuration mismatch",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw as `curl` may establish an insecure connection when attempting to upgrade a transfer with STARTTLS, potentially reusing an existing connection with mismatched TLS configurations. This could lead to unexpected data exposure or compromise, particularly in environments where `curl` is used for sensitive data transfers and relies on STARTTLS for security.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8286"
},
{
"category": "external",
"summary": "RHBZ#2496763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496763"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.html",
"url": "https://curl.se/docs/CVE-2026-8286.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.json",
"url": "https://curl.se/docs/CVE-2026-8286.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3718195",
"url": "https://hackerone.com/reports/3718195"
}
],
"release_date": "2026-07-03T06:14:17.541000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Insecure connection establishment due to TLS configuration mismatch"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9547",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-03T07:01:12.182841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496758"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server\u0027s host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Man-in-the-middle attack via SSH host key bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw where libcurl-based applications performing SCP or SFTP transfers with the CURLOPT_SSH_KEYFUNCTION callback may silently accept an untrusted server. This occurs when a server presents a host key type that differs from the one recorded in the known_hosts file, bypassing a critical host key verification and enabling potential man-in-the-middle attacks. The vulnerability requires specific application callback usage, not a general curl client default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9547"
},
{
"category": "external",
"summary": "RHBZ#2496758",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496758"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.html",
"url": "https://curl.se/docs/CVE-2026-9547.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.json",
"url": "https://curl.se/docs/CVE-2026-9547.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3751712",
"url": "https://hackerone.com/reports/3751712"
}
],
"release_date": "2026-07-03T06:18:44.499000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Man-in-the-middle attack via SSH host key bypass"
},
{
"cve": "CVE-2026-9563",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-02T09:01:05.254548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496411"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Parsson. The JSON parser did not enforce a default maximum on the number of characters consumed while processing a single JSON document. A remote attacker could exploit this by providing a very large, specially crafted JSON document. This could force applications to consume excessive CPU and memory, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Eclipse Parsson, a JSON processing library. Applications within Red Hat products that parse untrusted or attacker-controlled JSON documents are susceptible to excessive CPU and memory consumption. This can lead to resource exhaustion and service unavailability due to the parser not enforcing limits on the size or complexity of JSON input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9563"
},
{
"category": "external",
"summary": "RHBZ#2496411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9563"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9563",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9563"
},
{
"category": "external",
"summary": "https://github.com/eclipse-ee4j/parsson/commit/134e8d101aa74c8b9302d0cb62f6ccb4912a9d0c",
"url": "https://github.com/eclipse-ee4j/parsson/commit/134e8d101aa74c8b9302d0cb62f6ccb4912a9d0c"
},
{
"category": "external",
"summary": "https://github.com/eclipse-ee4j/parsson/pull/169",
"url": "https://github.com/eclipse-ee4j/parsson/pull/169"
},
{
"category": "external",
"summary": "https://github.com/eclipse-ee4j/parsson/tree/1.1.8",
"url": "https://github.com/eclipse-ee4j/parsson/tree/1.1.8"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/444",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/444"
},
{
"category": "external",
"summary": "https://repo.maven.apache.org/maven2/org/eclipse/parsson/parsson/1.1.8/",
"url": "https://repo.maven.apache.org/maven2/org/eclipse/parsson/parsson/1.1.8/"
}
],
"release_date": "2026-07-02T07:33:25.218000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing"
},
{
"cve": "CVE-2026-10050",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-07-16T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510732"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty\u0027s hash computation for passwords does not correctly handle certain characters, leading to a weakness in how passwords are processed. A remote attacker could exploit this by crafting a specific password that generates the same internal hash as a legitimate user\u0027s password, thereby bypassing authentication and gaining unauthorized access to the victim\u0027s account.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw allows an authentication bypass in Eclipse Jetty\u0027s HTTP Digest authentication. An attacker who knows a victim\u0027s username can craft a collision password if the original password contains non-Latin-1 characters, leading to unauthorized access in affected Red Hat products that utilize this authentication method.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10050"
},
{
"category": "external",
"summary": "RHBZ#2510732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10050"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10050",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10050"
}
],
"release_date": "2026-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that all user passwords configured for HTTP Digest authentication in affected Eclipse Jetty deployments exclusively use characters within the Latin-1 character set. This prevents the character encoding collision that leads to authentication bypass.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision"
},
{
"cve": "CVE-2026-10051",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-14T10:01:09.470495+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "RHBZ#2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
}
],
"release_date": "2026-07-14T08:44:38.233000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-15075",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-07-14T09:01:12.413297+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499919"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Eclipse Vert.x\u0027s `DefaultRedirectHandler` that affects Red Hat products utilizing `vertx-core` for HTTP client operations. The vulnerability allows sensitive request headers, such as authentication tokens and session cookies, to be forwarded to arbitrary external domains during HTTP 30x redirects. This could enable an attacker to capture credentials if they can induce a Vert.x HttpClient to redirect to a malicious server, potentially leading to unauthorized access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15075"
},
{
"category": "external",
"summary": "RHBZ#2499919",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499919"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161"
}
],
"release_date": "2026-07-14T08:15:53.650000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Vert.x HttpClient to strictly validate and restrict the URLs to which HTTP requests can be redirected. Implement allowlists for trusted domains and ensure that any user-supplied or external URLs processed by Vert.x HttpClient are thoroughly sanitized and validated to prevent redirection to attacker-controlled destinations. This may involve updating application-specific configurations or implementing custom URL validation logic. A service restart or reload may be required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects"
},
{
"cve": "CVE-2026-15076",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-07-14T09:00:58.070373+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server\u0027s domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker\u0027s account on that service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Eclipse Vert.x Web Client\u0027s `WebClientSession` component. The vulnerability arises from insufficient validation of the `Domain` attribute in `Set-Cookie` response headers, allowing a remote attacker to inject cookies scoped to arbitrary third-party domains. This could lead to sensitive data exposure and unauthorized access if a victim application subsequently sends requests to the targeted domain, presenting the attacker-controlled cookie. The impact is significant as it bypasses expected cross-domain security boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15076"
},
{
"category": "external",
"summary": "RHBZ#2499914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162"
}
],
"release_date": "2026-07-14T08:09:12.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-40898",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T19:00:56.584166+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484875"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service (DoS) condition where the affected server or client may crash or run out of resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in `quic-go` that allows a remote attacker to exhaust system memory by sending specially crafted HTTP/3 trailer fields. This can lead to crashes or resource unavailability in affected Red Hat products utilizing `quic-go` for HTTP/3 communication, impacting both client and server implementations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40898"
},
{
"category": "external",
"summary": "RHBZ#2484875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484875"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40898"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40898",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40898"
},
{
"category": "external",
"summary": "https://github.com/quic-go/quic-go/releases/tag/v0.59.1",
"url": "https://github.com/quic-go/quic-go/releases/tag/v0.59.1"
},
{
"category": "external",
"summary": "https://github.com/quic-go/quic-go/security/advisories/GHSA-vvgj-x9jq-8cj9",
"url": "https://github.com/quic-go/quic-go/security/advisories/GHSA-vvgj-x9jq-8cj9"
}
],
"release_date": "2026-06-04T17:43:36.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers"
},
{
"cve": "CVE-2026-40983",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:00:52.290020+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, as a remote unauthenticated attacker can disrupt the availability of affected systems by sending specially crafted gRPC requests. The broad accessibility of gRPC endpoints in typical deployments contributes to the elevated risk, allowing for significant service interruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40983"
},
{
"category": "external",
"summary": "RHBZ#2486697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40983",
"url": "https://spring.io/security/cve-2026-40983"
}
],
"release_date": "2026-06-09T03:46:54.131000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services exposing Micrometer\u0027s gRPC endpoints to trusted clients only. Implement firewall rules to limit inbound connections to the specific ports used by gRPC. If gRPC functionality is not essential for the deployment, consider disabling it entirely to eliminate the attack vector. Any changes to network configurations or service settings may require a service restart to take effect, potentially impacting availability during the transition.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests"
},
{
"cve": "CVE-2026-40984",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:01:51.700197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486716"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, a component present in several Red Hat products. A remote, unauthenticated attacker can exploit this flaw by sending specially crafted HTTP requests, leading to resource exhaustion and disrupting the availability of affected services. Exploitation of this flaw requires one or more HTTP server instrumentation(s), from one of the vulnerable components, to be configured to record metrics.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40984"
},
{
"category": "external",
"summary": "RHBZ#2486716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40984"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40984",
"url": "https://spring.io/security/cve-2026-40984"
}
],
"release_date": "2026-06-09T03:47:46.447000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests"
},
{
"cve": "CVE-2026-41242",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-04-18T17:00:50.677423+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the \"type\" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact remote code execution vulnerability in protobufjs allows attackers to inject arbitrary code into the \u0027type\u0027 fields of protobuf definitions, which executes during object decoding. Red Hat products that process untrusted protobuf definitions using the affected library versions are at risk. Red Hat has assessed this at IMPORTANT (not Critical) as exploitation requires low privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41242"
},
{
"category": "external",
"summary": "RHBZ#2459442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41242"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75",
"url": "https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956",
"url": "https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg"
}
],
"release_date": "2026-04-18T16:18:10.652000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields"
},
{
"cve": "CVE-2026-41695",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-10T00:01:53.243981+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487386"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by providing specially crafted property path strings to the MappingContext property path resolution. This can lead to resource exhaustion, resulting in a denial of service (DoS) for affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Spring Data Commons. Crafted property path strings can trigger excessive processing, leading to denial of service. Red Hat products that bundle spring-data-commons and expose Spring Data query resolution to untrusted input are affected. In Red Hat Dev Spaces, the vulnerable code path is reachable only through admin-authenticated endpoints, limiting practical exploitability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41695"
},
{
"category": "external",
"summary": "RHBZ#2487386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41695"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-41695",
"url": "https://spring.io/security/cve-2026-41695"
}
],
"release_date": "2026-06-09T23:47:33.927000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings"
},
{
"cve": "CVE-2026-41716",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-10T00:02:15.987955+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487394"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Data Commons. An attacker can exploit this vulnerability by sending repeated requests with specially crafted strings, which are then permanently retained in the internal property-lookup cache. This can lead to heap exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Spring Data Commons. The TypeDiscoverer cache can be exhausted by sending many unique invalid property names, leading to denial of service through excessive memory consumption. Red Hat products that bundle spring-data-commons and expose Spring Data query resolution to untrusted input are affected. In Red Hat Dev Spaces, the vulnerable code path is reachable only through admin-authenticated endpoints, limiting practical exploitability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41716"
},
{
"category": "external",
"summary": "RHBZ#2487394",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487394"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41716"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41716",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41716"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-41716",
"url": "https://spring.io/security/cve-2026-41716"
}
],
"release_date": "2026-06-09T23:48:20.282000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44705",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-11T17:01:27.295887+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Applications that pass user-controlled data to the file or directory creation functions without input sanitization are vulnerable to this issue. This flaw allows files to be created in arbitrary locations with the privileges of the running process. Due to this reason, this vulnerability has been rated with an Important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44705"
},
{
"category": "external",
"summary": "RHBZ#2487946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705"
},
{
"category": "external",
"summary": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65",
"url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
}
],
"release_date": "2026-06-11T15:42:46.565000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, validate and sanitize any user-controlled data before it is passed to the prefix, postfix or dir options of the file or directory creation functions, specifically rejecting or stripping input containing path traversal sequences.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape"
},
{
"cve": "CVE-2026-45149",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-29T21:02:00.092772+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483481"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high memory consumption and potential application crashes. This can impact the availability of systems using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship brace-expansion versions 1.x and 2.x, which are not affected by this vulnerability. The flaw exists only in versions 5.0.0 through 5.0.5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45149"
},
{
"category": "external",
"summary": "RHBZ#2483481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2"
}
],
"release_date": "2026-05-29T19:55:07.337000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45623",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-07-27T18:01:09.671498+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507595"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifically the first few bytes of file content. Additionally, this vulnerability may be exploited to cause a Denial of Service (DoS) by targeting large files, making the system unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postcss: PostCSS: Information disclosure and denial of service via crafted CSS input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45623"
},
{
"category": "external",
"summary": "RHBZ#2507595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45623"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q",
"url": "https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q"
}
],
"release_date": "2026-07-27T17:23:13.326000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postcss: PostCSS: Information disclosure and denial of service via crafted CSS input"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46681",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-07-21T15:01:12.368235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `@nevware21/ts-utils` library. This vulnerability allows a remote attacker to manipulate the fundamental properties of objects within an application. By exploiting this, an attacker could potentially execute unauthorized code, leading to a complete compromise of the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@nevware21/ts-utils: @nevware21/ts-utils: Arbitrary Code Execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. The `@nevware21/ts-utils` library is susceptible to prototype pollution when processing untrusted input, allowing an attacker to modify the prototype chain of objects. This could lead to arbitrary code execution within applications utilizing the affected library, impacting data integrity and potentially system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46681"
},
{
"category": "external",
"summary": "RHBZ#2503661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46681"
},
{
"category": "external",
"summary": "https://github.com/nevware21/ts-utils/commit/5e887f4e2fbee7160c8f501634c45e6a229e83bb",
"url": "https://github.com/nevware21/ts-utils/commit/5e887f4e2fbee7160c8f501634c45e6a229e83bb"
},
{
"category": "external",
"summary": "https://github.com/nevware21/ts-utils/security/advisories/GHSA-x7j8-49r8-mr43",
"url": "https://github.com/nevware21/ts-utils/security/advisories/GHSA-x7j8-49r8-mr43"
}
],
"release_date": "2026-07-21T14:02:03.732000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@nevware21/ts-utils: @nevware21/ts-utils: Arbitrary Code Execution via Prototype Pollution"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48020",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-23T20:00:57.714939+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491915"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the StripPrefix middleware, allowing an unauthenticated attacker to bypass route-level authentication and authorization. By crafting a request path containing \u0027..\u0027 or its percent-encoded form, an attacker can access protected backend paths, such as administrative or internal configuration endpoints, without proper authentication. This could lead to unauthorized information disclosure or modification of sensitive settings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Authentication bypass in StripPrefix middleware allows unauthorized access to protected paths",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important authentication bypass flaw in Traefik\u0027s StripPrefix middleware, affecting Red Hat OpenShift Dev Spaces. An unauthenticated remote attacker can exploit this by crafting a specific request path, gaining access to protected backend resources like administrative or internal configuration endpoints. This could lead to unauthorized information disclosure or modification of sensitive settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48020"
},
{
"category": "external",
"summary": "RHBZ#2491915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48020"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.48",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.48"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.19",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.19"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.3",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.3"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-xf64-8mw2-4gr2",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-xf64-8mw2-4gr2"
}
],
"release_date": "2026-06-23T19:10:31.557000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Authentication bypass in StripPrefix middleware allows unauthorized access to protected paths"
},
{
"cve": "CVE-2026-48068",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-06-11T13:27:54+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499682"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in @grpc/grpc-js, a pure JavaScript gRPC client and server library. An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This vulnerability affects all servers created using @grpc/grpc-js, and no workaround is available. An unauthenticated remote attacker can exploit this to cause a denial of service by sending a malformed HTTP/2 stream to a gRPC server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in @grpc/grpc-js. An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers created using @grpc/grpc-js. There is no workaround.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48068"
},
{
"category": "external",
"summary": "RHBZ#2499682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499682"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48068",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48068"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48068",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48068"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-node/security/advisories/GHSA-5375-pq7m-f5r2",
"url": "https://github.com/grpc/grpc-node/security/advisories/GHSA-5375-pq7m-f5r2"
}
],
"release_date": "2026-06-11T13:27:54+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Upgrade to @grpc/grpc-js 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, or 1.14.4. There is no workaround for this vulnerability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation"
},
{
"cve": "CVE-2026-48491",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-06-23T20:01:26.461503+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491923"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability allows an unauthenticated client to bypass mutual Transport Layer Security (TLS) enforcement, a security measure that verifies both client and server identities. The bypass occurs due to an issue in Traefik\u0027s domain-fronting protection (SNICheck), which incorrectly processes TLS options for HTTP Host headers. As a result, an attacker can gain unauthorized access to protected backend services without presenting a required client certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Traefik: Traefik: Unauthorized access due to mutual TLS bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Traefik that allows an unauthenticated client to bypass mutual TLS authentication. The vulnerability arises from an issue in Traefik\u0027s domain-fronting protection when specific wildcard host rules with strict TLS options are used alongside permissive SNI configurations on the same entrypoint. This bypass enables unauthorized access to protected backend services, undermining critical access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48491"
},
{
"category": "external",
"summary": "RHBZ#2491923",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491923"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48491"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.3",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.3"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-5r4w-85f3-pw66",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-5r4w-85f3-pw66"
}
],
"release_date": "2026-06-23T19:12:10.819000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid configuring Traefik with wildcard host rules (e.g., Host(*.example.com)) alongside strict TLS options such as RequireAndVerifyClientCert on entrypoints that also serve permissive SNI configurations. Alternatively, restrict network access to Traefik\u0027s entrypoints to trusted networks only, thereby limiting potential exposure.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Traefik: Traefik: Unauthorized access due to mutual TLS bypass"
},
{
"cve": "CVE-2026-49978",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-07-14T21:05:26.253019+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `\u003ctemplate\u003e.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49978"
},
{
"category": "external",
"summary": "RHBZ#2500695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
"url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
"url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
}
],
"release_date": "2026-07-14T20:02:46.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
},
{
"cve": "CVE-2026-50193",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-23T22:01:01.154533+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491999"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in jackson-databind, affecting services that process deeply nested JSON data. Exploitation occurs when a service reads JSON as `JsonNode` and subsequently writes it back using `JsonNode.toString()`, leading to excessive resource consumption and potential service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50193"
},
{
"category": "external",
"summary": "RHBZ#2491999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c",
"url": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/3447",
"url": "https://github.com/FasterXML/jackson-databind/issues/3447"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh"
}
],
"release_date": "2026-06-23T21:00:20.444000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
},
{
"cve": "CVE-2026-53622",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-23T20:01:29.612273+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491924"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This critical vulnerability in Traefik\u0027s HTTP/3 (QUIC) TLS configuration selection allows unauthenticated clients to bypass router-specific mutual Transport Layer Security (mTLS) enforcement. When HTTP/3 is enabled and a router uses wildcard host rules or case-insensitive hostname matching with client certificate authentication, an attacker can complete the QUIC handshake without presenting a certificate. This bypass grants unauthorized access to a backend that should be protected by mTLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: mTLS enforcement bypass due to HTTP/3 TLS configuration flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Traefik, as shipped in Red Hat OpenShift Dev Spaces, allows unauthenticated clients to bypass mutual TLS (mTLS) enforcement when HTTP/3 (QUIC) is enabled. An attacker can gain unauthorized access to mTLS-protected backends if the Traefik router uses wildcard host rules or case-insensitive hostname matching, circumventing expected client certificate authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53622"
},
{
"category": "external",
"summary": "RHBZ#2491924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491924"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53622"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53622",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53622"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.3",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.3"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-9cr8-q42q-g8m7",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-9cr8-q42q-g8m7"
}
],
"release_date": "2026-06-23T19:13:28.844000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable HTTP/3 (QUIC) on Traefik entrypoints. This prevents the TLS configuration selection flaw that leads to mTLS bypass. Consult Traefik documentation for specific configuration steps to disable HTTP/3. Restarting the Traefik service will be required for the changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: mTLS enforcement bypass due to HTTP/3 TLS configuration flaw"
},
{
"cve": "CVE-2026-54399",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-01T18:02:08.214968+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496101"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or excessive header length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Apache HttpComponents Core allows a remote attacker to cause a denial of service by sending HTTP/1.1 messages with an excessive number or length of headers. This can lead to memory exhaustion in applications using the affected HTTP/1.1 message parser, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54399"
},
{
"category": "external",
"summary": "RHBZ#2496101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54399",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54399"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54399",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54399"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/01/4",
"url": "http://www.openwall.com/lists/oss-security/2026/07/01/4"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy",
"url": "https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy"
}
],
"release_date": "2026-07-01T17:02:21.778000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure an upstream proxy or web application firewall (WAF) to enforce limits on the number and length of HTTP headers. This prevents malformed requests from reaching and exhausting the vulnerable Apache HttpComponents Core component. Consult your proxy or WAF documentation for specific configuration. A service restart may be required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers"
},
{
"cve": "CVE-2026-54428",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-01T18:02:25.195687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496106"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system\u0027s configured header list size limit is applied. This can lead to the affected system becoming unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Apache HttpComponents Core. The HTTP/2 HPACK decoder is susceptible to memory exhaustion when processing oversized compressed header blocks from a remote attacker. This occurs before the system\u0027s configured header list size limits are applied, potentially rendering affected Red Hat products unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54428"
},
{
"category": "external",
"summary": "RHBZ#2496106",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496106"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54428",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54428"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54428",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54428"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/01/3",
"url": "http://www.openwall.com/lists/oss-security/2026/07/01/3"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd",
"url": "https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd"
}
],
"release_date": "2026-07-01T17:03:53.938000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
},
{
"cve": "CVE-2026-54763",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-07-06T22:02:30.381066+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497551"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. The BasicAuth, DigestAuth, and ForwardAuth middlewares in Traefik do not correctly treat underscore-variant header names. This allows a remote attacker to inject a specially crafted header that bypasses Traefik\u0027s security mechanisms. As a result, the attacker can spoof identity or authorization context to the backend, potentially gaining unauthorized access to protected resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "traefik: Traefik: Identity spoofing via improper header handling in authentication middlewares",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Traefik\u0027s authentication middlewares allows a remote attacker to bypass security mechanisms by injecting specially crafted underscore-variant headers. This can lead to identity spoofing or unauthorized access to backend services, as Traefik fails to properly strip these headers before forwarding them. The vulnerability is significant because many backend systems normalize these header forms, making exploitation feasible in typical deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54763"
},
{
"category": "external",
"summary": "RHBZ#2497551",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497551"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54763"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54763",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54763"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/commit/108a5264473a2cbc8f12d6d691a3c6553cdf2c1b",
"url": "https://github.com/traefik/traefik/commit/108a5264473a2cbc8f12d6d691a3c6553cdf2c1b"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/pull/13262",
"url": "https://github.com/traefik/traefik/pull/13262"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5"
}
],
"release_date": "2026-07-06T20:33:36.059000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "traefik: Traefik: Identity spoofing via improper header handling in authentication middlewares"
},
{
"cve": "CVE-2026-55831",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-21T00:02:57.305291+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503103"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Netty\u0027s SPDY SETTINGS decoder, allowing a remote unauthenticated attacker to exhaust system resources. By sending a specially crafted SPDY/3.1 SETTINGS frame, an attacker can cause excessive memory allocation and CPU usage, leading to a denial of service. This vulnerability has a low attack complexity and requires no user interaction or privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55831"
},
{
"category": "external",
"summary": "RHBZ#2503103",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503103"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w"
}
],
"release_date": "2026-07-20T23:00:31.859000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing"
},
{
"cve": "CVE-2026-55833",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-21T00:01:25.203265+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503101"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY header decoding. A remote, unauthenticated attacker can send a small, compressed SPDY header block that, during decompression, expands significantly beyond configured limits. This leads to excessive CPU and memory consumption, potentially causing resource exhaustion and service unavailability in affected Red Hat products that utilize Netty with SPDY.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55833"
},
{
"category": "external",
"summary": "RHBZ#2503101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c",
"url": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c"
}
],
"release_date": "2026-07-20T23:18:07.893000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification"
},
{
"cve": "CVE-2026-56745",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-07-21T22:52:47.296001+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505911"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty\u0027s SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY-to-HTTP codec, affecting Red Hat products that utilize vulnerable versions of Netty. A remote, unauthenticated attacker can exploit a memory leak in the `SpdyHttpDecoder` by sending specially crafted `SYN_STREAM` frames, leading to native memory exhaustion and a denial of service for the affected system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56745"
},
{
"category": "external",
"summary": "RHBZ#2505911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq",
"url": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq"
}
],
"release_date": "2026-07-21T21:31:25.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec"
},
{
"cve": "CVE-2026-56746",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-21T22:30:30.983812+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505422"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat ships Netty\u0027s netty-codec-http component in multiple products. The CorsHandler shortCircuit() feature, when enabled, is intended to reject unauthorized cross-origin requests before they reach the application. Due to a logical operator error in origin validation, requests with a null Origin header bypass this protection entirely. Upgrade to Netty 4.1.136.Final or 4.2.16.Final to resolve this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56746"
},
{
"category": "external",
"summary": "RHBZ#2505422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505422"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5"
}
],
"release_date": "2026-07-21T21:36:18.627000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "If CORS short-circuit functionality is not required, disable the shortCircuit() configuration in the CorsHandler. Alternatively, implement application-level origin validation to reject requests with null Origin headers. A web application firewall (WAF) can also be configured to block requests with null or missing Origin headers.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header"
},
{
"cve": "CVE-2026-56819",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-07-21T23:03:36.448652+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Netty\u0027s HTTP/2 codec, which could lead to a denial of service. Red Hat products utilizing netty-codec-http2 with HTTP/2 content decompression enabled are susceptible to memory exhaustion when processing specially crafted HTTP/2 DATA frames. This allows a remote attacker to leak memory buffers, eventually exhausting available memory and impacting system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56819"
},
{
"category": "external",
"summary": "RHBZ#2505980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972",
"url": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972"
}
],
"release_date": "2026-07-21T22:11:17.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak"
},
{
"cve": "CVE-2026-59296",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-08-21T10:50:55.231408+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer\u0027s StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary metrics, including critical system or business metrics, and the injection of false log entries, potentially impacting monitoring and auditing systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59296"
},
{
"category": "external",
"summary": "RHBZ#2520949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59296"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59296",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59296"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-59296",
"url": "https://spring.io/security/cve-2026-59296"
}
],
"release_date": "2026-08-21T10:47:25.384000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
},
{
"cve": "CVE-2026-59873",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-08T16:01:31.576716+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498120"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tar: node-tar: Denial of Service via crafted gzip bomb",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in node-tar is rated as Important. A remote attacker can exploit the lack of strict limits on decompressed data and entry counts within the library\u0027s archive processing to craft a gzip bomb. This can lead to a denial of service by exhausting system resources such as disk space and CPU, making the affected system or application unavailable without requiring authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59873"
},
{
"category": "external",
"summary": "RHBZ#2498120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59873"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3",
"url": "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/releases/tag/v7.5.19",
"url": "https://github.com/isaacs/node-tar/releases/tag/v7.5.19"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw"
}
],
"release_date": "2026-07-08T15:22:40.077000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tar: node-tar: Denial of Service via crafted gzip bomb"
},
{
"cve": "CVE-2026-59874",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:09.952291+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tar: Node-tar: Denial of Service via malformed tar archive header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in node-tar affects Red Hat products that process untrusted tar archives. A remote attacker can provide a specially crafted archive with a malformed header, leading to an infinite loop during parsing and causing the application to become unresponsive. This can impact the availability of services relying on node-tar for archive manipulation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59874"
},
{
"category": "external",
"summary": "RHBZ#2498116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59874"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5",
"url": "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/releases/tag/v7.5.18",
"url": "https://github.com/isaacs/node-tar/releases/tag/v7.5.18"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w"
}
],
"release_date": "2026-07-08T15:23:47.527000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tar: Node-tar: Denial of Service via malformed tar archive header"
},
{
"cve": "CVE-2026-59877",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-08T16:01:54.459482+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498127"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library\u0027s parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted .proto schema",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The `protobufjs` library, used in Red Hat products, is susceptible to a Denial of Service when processing a specially crafted `.proto` schema. A remote attacker can exploit this by providing a malformed schema, causing an infinite loop during parsing and leading to service unavailability. This is considered Important due to the potential for significant disruption to services that handle external protobuf definitions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59877"
},
{
"category": "external",
"summary": "RHBZ#2498127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498127"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59877"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217",
"url": "https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69f",
"url": "https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69f"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/pull/2352",
"url": "https://github.com/protobufjs/protobuf.js/pull/2352"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccww",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccww"
}
],
"release_date": "2026-07-08T15:28:07.696000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Applications that only encode or decode protobuf messages using trusted schemas are not directly affected. Until patched protobufjs packages (7.6.5 / 8.6.6) are available, do not parse .proto schema text from untrusted sources via parse, Root.load, or Root.loadSync. Where untrusted schema input cannot be avoided, isolate .proto parsing in a dedicated worker thread or subprocess and enforce an explicit timeout so a non-returning parse cannot block the main event loop. Optional process-manager controls (for example systemd restart-on-failure, or CPU/cgroup limits) may reduce host-level impact or aid recovery for supervised services, but they do not fix the parser bug and are not a substitute for input isolation or applying the update.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted .proto schema"
},
{
"cve": "CVE-2026-59888",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-07-14T18:02:08.404867+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500096"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an untrusted client could set internal or privileged components from external input, potentially leading to unauthorized modification or disclosure of sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This flaw in jackson-databind allows an attacker to bypass the @JsonIgnore annotation when deserializing Java Records that utilize a PropertyNamingStrategy. An untrusted client could exploit this to assign values to internal or privileged Record constructor parameters, potentially leading to unauthorized data modification or disclosure. Red Hat products using affected versions of jackson-databind for deserialization of external input into Java Records with PropertyNamingStrategy are susceptible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59888"
},
{
"category": "external",
"summary": "RHBZ#2500096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59888"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4",
"url": "https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d",
"url": "https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5974",
"url": "https://github.com/FasterXML/jackson-databind/pull/5974"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5"
}
],
"release_date": "2026-07-14T16:44:20.091000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records"
},
{
"cve": "CVE-2026-59899",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-09T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507482"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Netty\u0027s HTTP decoder, which could lead to a denial of service. Red Hat products utilizing `netty-codec-http` are susceptible to memory exhaustion when processing specially crafted, highly compressed HTTP payloads. This allows a remote attacker to trigger excessive memory allocation, impacting system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59899"
},
{
"category": "external",
"summary": "RHBZ#2507482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59899"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww",
"url": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww"
},
{
"category": "external",
"summary": "https://netty.io/news/2026/07/09/4-1-136-Final.html",
"url": "https://netty.io/news/2026/07/09/4-1-136-Final.html"
}
],
"release_date": "2026-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)"
},
{
"cve": "CVE-2026-65600",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-07-22T12:01:35.041960+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik. An unauthenticated remote attacker can bypass authentication due to a path traversal vulnerability in the ReplacePathRegex middleware. When this middleware is misconfigured, it forwards un-normalized paths, allowing a backend to resolve them to protected routes and grant unauthorized access. This bypass enables access to sensitive administrative interfaces.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "traefik: Traefik: Authentication bypass via path traversal in ReplacePathRegex middleware",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in Traefik\u0027s `ReplacePathRegex` middleware allows an unauthenticated remote attacker to bypass authentication. When the middleware is configured with a regex that captures user-controlled path segments without a mandatory path separator, it can forward un-normalized paths. This enables access to protected backend routes, including sensitive administrative interfaces, by resolving paths like `/../admin` after normalization. \n\nThe impact to OpenShift Dev Spaces is rated as low, because the affected `ReplacePathRegex` middleware is not configured in the shipped Traefik gateway.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-65600"
},
{
"category": "external",
"summary": "RHBZ#2506097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-65600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65600"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/pull/13466",
"url": "https://github.com/traefik/traefik/pull/13466"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/traefik-before-authentication-bypass-via-replacepathregex",
"url": "https://www.vulncheck.com/advisories/traefik-before-authentication-bypass-via-replacepathregex"
}
],
"release_date": "2026-07-22T11:21:46.783000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "traefik: Traefik: Authentication bypass via path traversal in ReplacePathRegex middleware"
},
{
"cve": "CVE-2026-65601",
"cwe": {
"id": "CWE-348",
"name": "Use of Less Trusted Source"
},
"discovery_date": "2026-07-22T12:01:59.281071+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506094"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, a cloud-native edge router. A low-privileged user in a Kubernetes environment could exploit a namespace confusion vulnerability within the Kubernetes Gateway API provider. This flaw allows an attacker to bypass security controls by incorrectly binding a Traefik Middleware from a different namespace, potentially leading to the injection of trusted identity headers into network requests. This could result in unauthorized access or privilege escalation within the Kubernetes cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik/v3: traefik: Traefik: Privilege Escalation via Kubernetes Gateway API Namespace Confusion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Traefik\u0027s Kubernetes Gateway API provider, affecting Red Hat OpenShift Dev Spaces. A low-privileged user in a Kubernetes environment can exploit a namespace confusion vulnerability to bypass security controls. This allows for the incorrect binding of a Traefik Middleware from a different namespace, potentially leading to the injection of trusted identity headers and subsequent privilege escalation within the cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-65601"
},
{
"category": "external",
"summary": "RHBZ#2506094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506094"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-65601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65601"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0",
"url": "https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref",
"url": "https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref"
}
],
"release_date": "2026-07-22T11:21:47.468000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik/v3: traefik: Traefik: Privilege Escalation via Kubernetes Gateway API Namespace Confusion"
},
{
"cve": "CVE-2026-67213",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-29T14:01:09.009518+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508406"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application\u0027s calling thread.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An algorithmic denial of service flaw was found in the `nanoid` library. When calling `customAlphabet` or `customRandom` with a `size` parameter of `0`, the internal generation loop fails to meet its termination condition. In Node.js or browser execution contexts, an attacker who supplies an unvalidated, zero-value size parameter to these functions causes the thread to enter an infinite loop, driving CPU utilization to 100% and completely blocking event loop execution for that thread.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67213"
},
{
"category": "external",
"summary": "RHBZ#2508406",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508406"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67213"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",
"url": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.6",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.6"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",
"url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"
}
],
"release_date": "2026-07-29T13:32:01.534000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure application code validates the size parameter passed to customAlphabet or customRandom, rejecting or sanitizing zero-value inputs before passing them to nanoid.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation"
},
{
"cve": "CVE-2026-67214",
"cwe": {
"id": "CWE-839",
"name": "Numeric Range Comparison Without Minimum Check"
},
"discovery_date": "2026-07-29T14:01:28.637584+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508411"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library\u0027s non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An input validation flaw in Nano ID\u0027s non-secure module (`nanoid/non-secure`) causes an infinite loop in the `customAlphabet` and `nanoid` functions when processed with a negative size parameter. Because the decrementing loop counter never meets its termination condition, an unauthenticated attacker who passes an unvalidated negative integer value can block the NodeJS event loop, resulting in a thread hang and complete Denial of Service (DoS) for the host application.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "RHBZ#2508411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49",
"url": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.16",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.16"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module",
"url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"
}
],
"release_date": "2026-07-29T13:32:02.265000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Sanitize all user-supplied integer inputs before passing them to `nanoid` or `customAlphabet` functions in the `nanoid/non-secure` module, ensuring the size parameter is strictly a non-negative integer.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions"
},
{
"cve": "CVE-2026-68494",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-04T15:01:53.631865+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2511026"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68494"
},
{
"category": "external",
"summary": "RHBZ#2511026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
"url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
"url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
"url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1611",
"url": "https://github.com/FasterXML/jackson-core/pull/1611"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
"url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
}
],
"release_date": "2026-08-04T14:39:14.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
},
{
"cve": "CVE-2026-69152",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-03T18:01:13.566423+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "RHBZ#2510722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
"url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
"url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
"url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
"url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
}
],
"release_date": "2026-08-03T16:33:36.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
},
{
"cve": "CVE-2026-69153",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-03T18:01:01.506065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510719"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the \u0027from\u0027 parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application\u0027s source code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Moderate because the information disclosed is limited to files with a .map extension. Source map files may contain source code paths and content, but the attacker cannot read arbitrary files on the system. Exploitation requires the application to process attacker-controlled CSS through PostCSS on the server side.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69153"
},
{
"category": "external",
"summary": "RHBZ#2510719",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69153",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
"url": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/releases/tag/8.5.19",
"url": "https://github.com/postcss/postcss/releases/tag/8.5.19"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
"url": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"
}
],
"release_date": "2026-08-03T16:56:25.733000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL"
},
{
"cve": "CVE-2026-73086",
"cwe": {
"id": "CWE-1241",
"name": "Use of Predictable Algorithm in Random Number Generator"
},
"discovery_date": "2026-08-11T17:11:45.607696+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Predictable ID generation due to integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the nanoid JavaScript library allows a remote attacker to cause predictable ID generation by exploiting an integer overflow in the `nanoid(size)` function. This can lead to the compromise of session tokens, CSRF tokens, and API keys, bypassing security mechanisms. The attack requires specific conditions, contributing to its Important severity rather than Critical.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "RHBZ#2514175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4",
"url": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3",
"url": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac",
"url": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/3.3.12",
"url": "https://github.com/ai/nanoid/releases/tag/3.3.12"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.11",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.11"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w",
"url": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"
}
],
"release_date": "2026-08-11T16:46:23.024000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Predictable ID generation due to integer overflow"
},
{
"cve": "CVE-2026-73566",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T17:51:27.686658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515509"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the `filesFilter` function can lead to a stack overflow. This issue results in a denial of service (DoS) by terminating Node.js applications that consume these archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tar: node-tar: Denial of Service via crafted long-path tar archive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service vulnerability exists in the `node-tar` library, affecting Node.js applications that process untrusted tar archives with member selection. A remote attacker could exploit this by providing a specially crafted archive containing excessively long paths, leading to an uncatchable stack overflow and termination of the consuming Node.js application. This is considered Important due to the potential for service disruption in applications handling untrusted archive content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73566"
},
{
"category": "external",
"summary": "RHBZ#2515509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515509"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73566",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73566"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a",
"url": "https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m"
}
],
"release_date": "2026-08-13T17:39:05.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tar: node-tar: Denial of Service via crafted long-path tar archive"
},
{
"cve": "CVE-2026-73646",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-17T15:41:38.584036+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517456"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted `sourceMappingURL` values in untrusted CSS files. This allows the attacker to disclose sensitive `sourcesContent` from arbitrary `.map` files accessible on the system, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postcss: PostCSS: Information disclosure via path traversal in source map auto-loading",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73646"
},
{
"category": "external",
"summary": "RHBZ#2517456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73646"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c",
"url": "https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/releases/tag/8.5.18",
"url": "https://github.com/postcss/postcss/releases/tag/8.5.18"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849",
"url": "https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849"
}
],
"release_date": "2026-08-17T15:35:13.518000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postcss: PostCSS: Information disclosure via path traversal in source map auto-loading"
},
{
"cve": "CVE-2026-75838",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-18T11:32:11.523560+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during IN_PLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of malicious scripts even after the HTML appears to be sanitized, leading to potential information disclosure or unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75838"
},
{
"category": "external",
"summary": "RHBZ#2517772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75838",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75838"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75838",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75838"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/dompurify-before-cross-site-scripting-via-in-place-hook",
"url": "https://www.vulncheck.com/advisories/dompurify-before-cross-site-scripting-via-in-place-hook"
}
],
"release_date": "2026-08-18T11:19:47.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-01T18:22:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied. \nFor details on how to apply this update, refer to: \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:62260"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x",
"Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization"
}
]
}
RHSA-2026:8490
Vulnerability from csaf_redhat - Published: 2026-04-16 14:03 - Updated: 2026-09-06 15:30Summary
Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1
Severity
Critical
Notes
Topic: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12977, OSSM-12978)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12977, OSSM-12978)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8490",
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8490.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1",
"tracking": {
"current_release_date": "2026-09-06T15:30:50+00:00",
"generator": {
"date": "2026-09-06T15:30:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:8490",
"initial_release_date": "2026-04-16T14:03:40+00:00",
"revision_history": [
{
"date": "2026-04-16T14:03:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:30:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.1",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Adf2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Afd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8491
Vulnerability from csaf_redhat - Published: 2026-04-16 14:30 - Updated: 2026-09-06 15:30Summary
Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2
Severity
Critical
Notes
Topic: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12980, OSSM-12981)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12980, OSSM-12981)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8491",
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8491.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2",
"tracking": {
"current_release_date": "2026-09-06T15:30:51+00:00",
"generator": {
"date": "2026-09-06T15:30:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:8491",
"initial_release_date": "2026-04-16T14:30:52+00:00",
"revision_history": [
{
"date": "2026-04-16T14:30:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:30:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.2",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ada74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8493
Vulnerability from csaf_redhat - Published: 2026-04-16 14:41 - Updated: 2026-09-06 15:30Summary
Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3
Severity
Critical
Notes
Topic: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-13276, OSSM-13277, OSSM-13278)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-13276, OSSM-13277, OSSM-13278)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8493",
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8493.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3",
"tracking": {
"current_release_date": "2026-09-06T15:30:51+00:00",
"generator": {
"date": "2026-09-06T15:30:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:8493",
"initial_release_date": "2026-04-16T14:41:31+00:00",
"revision_history": [
{
"date": "2026-04-16T14:41:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:30:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Adaa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-operator-bundle@sha256%3Ac93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776225903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ace46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Aa69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:9385
Vulnerability from csaf_redhat - Published: 2026-04-21 15:08 - Updated: 2026-09-06 15:31Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.
Breaking changes:
* None.
Deprecations:
* None.
Technology Preview features:
* None.
Enhancements:
* None.
Bug fixes:
* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.
* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.
* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.
* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.
* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.
* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.
* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.
* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.
* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.
* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.
* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.
* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.
Known issues:
* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Moderate
A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.\n\n\nBreaking changes:\n\n* None.\n\n\nDeprecations:\n\n* None.\n\n\nTechnology Preview features:\n\n* None.\n\n\nEnhancements:\n\n* None.\n\n\nBug fixes:\n\n* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.\n\n* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.\n\n* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.\n\n* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.\n\n* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.\n\n* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.\n\n* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.\n\n* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.\n\n* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.\n\n* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.\n\n\nKnown issues:\n\n* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9385",
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4645",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9385.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release",
"tracking": {
"current_release_date": "2026-09-06T15:31:11+00:00",
"generator": {
"date": "2026-09-06T15:31:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9385",
"initial_release_date": "2026-04-21T15:08:38+00:00",
"revision_history": [
{
"date": "2026-04-21T15:08:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:31:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3Ad180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776674955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Aa5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Ac939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Aa66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ab68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ac7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Aee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-4645",
"discovery_date": "2026-03-23T06:02:52.120840+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "A denial of service vulnerability was discovered in `github.com/antchfx/xpath`, with Important severity. Systems processing untrusted XPath expressions are vulnerable to an infinite loop, leading to 100% CPU utilization which would impact normal operations of the system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4645"
}
],
"release_date": "2026-03-17T20:58:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict the processing of untrusted or unvalidated XPath expressions by applications which utilize the `github.com/antchfx/xpath` component. Implement input validation and sanitization for all XPath expressions originating from external or untrusted sources. If possible, configure applications to only process XPath expressions from trusted sources or disable features that allow arbitrary XPath expression evaluation.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/antchfx/xpath: xpath: Denial of Service via crafted Boolean XPath expressions"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32285",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:54.925687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "RHBZ#2451846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://github.com/buger/jsonparser/issues/275",
"url": "https://github.com/buger/jsonparser/issues/275"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4514",
"url": "https://github.com/golang/vulndb/issues/4514"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4514",
"url": "https://pkg.go.dev/vuln/GO-2026-4514"
}
],
"release_date": "2026-03-26T19:40:51.837000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:9388
Vulnerability from csaf_redhat - Published: 2026-04-21 15:19 - Updated: 2026-09-06 14:30Summary
Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release
Severity
Important
Notes
Topic: Red Hat build of OpenTelemetry 3.9.2 has been released
Details: This release of the Red Hat build of OpenTelemetry provides security improvements.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* XPath library vulnerability is fixed: Previously, the 'github.com/antchfx/xpath' library was vulnerable to a denial of service (DoS) attack. This issue occurred because specially crafted boolean XPath expressions that evaluated to true caused an infinite loop in the 'logicalQuery.Select' function, leading to 100% CPU utilization. With this update, the XPath library properly handles these expressions and prevents infinite loops. As a result, the system is no longer vulnerable to this DoS condition. For more information, see https://access.redhat.com/security/cve/cve-2026-32287.
* gRPC-Go authorization bypass vulnerability is fixed: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 ':path' pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed ':path' that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the ':path' pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.
* Go JOSE denial of service vulnerability is fixed: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial of service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.
Known issues:
* The filesystem scraper does not produce the `system.filesystem.inodes.usage` and `system.filesystem.usage` metrics in the Host Metrics Receiver after upgrading from Collector version 0.142.0 to 0.143.0 or later. No known workaround exists. For more information, see https://issues.redhat.com/browse/TRACING-5963.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.
6.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Workaround
|
Threats
Impact
Important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat build of OpenTelemetry 3.9.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat build of OpenTelemetry provides security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* XPath library vulnerability is fixed: Previously, the \u0027github.com/antchfx/xpath\u0027 library was vulnerable to a denial of service (DoS) attack. This issue occurred because specially crafted boolean XPath expressions that evaluated to true caused an infinite loop in the \u0027logicalQuery.Select\u0027 function, leading to 100% CPU utilization. With this update, the XPath library properly handles these expressions and prevents infinite loops. As a result, the system is no longer vulnerable to this DoS condition. For more information, see https://access.redhat.com/security/cve/cve-2026-32287.\n\n* gRPC-Go authorization bypass vulnerability is fixed: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 \u0027:path\u0027 pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed \u0027:path\u0027 that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the \u0027:path\u0027 pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* Go JOSE denial of service vulnerability is fixed: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial of service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n\nKnown issues:\n\n* The filesystem scraper does not produce the `system.filesystem.inodes.usage` and `system.filesystem.usage` metrics in the Host Metrics Receiver after upgrading from Collector version 0.142.0 to 0.143.0 or later. No known workaround exists. For more information, see https://issues.redhat.com/browse/TRACING-5963.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9388",
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32287",
"url": "https://access.redhat.com/security/cve/CVE-2026-32287"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9388.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release",
"tracking": {
"current_release_date": "2026-09-06T14:30:51+00:00",
"generator": {
"date": "2026-09-06T14:30:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9388",
"initial_release_date": "2026-04-21T15:19:05+00:00",
"revision_history": [
{
"date": "2026-04-21T15:19:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T14:30:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-operator-bundle@sha256%3A333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776245088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Abcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3Aff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Aca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32287",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-26T20:02:37.779428+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32287"
},
{
"category": "external",
"summary": "RHBZ#2451856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287"
},
{
"category": "external",
"summary": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494",
"url": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494"
},
{
"category": "external",
"summary": "https://github.com/antchfx/xpath/issues/121",
"url": "https://github.com/antchfx/xpath/issues/121"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4526",
"url": "https://github.com/golang/vulndb/issues/4526"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4526",
"url": "https://pkg.go.dev/vuln/GO-2026-4526"
}
],
"release_date": "2026-03-26T19:40:52.142000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:9448
Vulnerability from csaf_redhat - Published: 2026-04-21 17:23 - Updated: 2026-09-06 15:31Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.7
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.1.7
This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.1.7, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Fixes/Improvements:
Security Fix(es):
* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)
* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)
* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
Bug Fix(es):
* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 | — |
Workaround
|
Threats
Impact
Important
References
45 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh 3.1.7\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh 3.1.7, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)\n\n* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)\n\n* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\n* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nBug Fix(es):\n\n* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9448",
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-25679",
"url": "https://access.redhat.com/security/cve/cve-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33186",
"url": "https://access.redhat.com/security/cve/cve-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33747",
"url": "https://access.redhat.com/security/cve/cve-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33748",
"url": "https://access.redhat.com/security/cve/cve-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-34986",
"url": "https://access.redhat.com/security/cve/cve-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9448.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.7",
"tracking": {
"current_release_date": "2026-09-06T15:31:14+00:00",
"generator": {
"date": "2026-09-06T15:31:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9448",
"initial_release_date": "2026-04-21T17:23:46+00:00",
"revision_history": [
{
"date": "2026-04-21T17:23:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:31:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.1",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3A2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776677125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238635"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776412783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232570"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ae496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776256858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776315466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh-tech-preview\u0026tag=1776177800"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238635"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776412783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3Abfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232570"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776256858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776315466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh-tech-preview\u0026tag=1776177800"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238635"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776412783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232570"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Aa55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776256858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776315466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh-tech-preview\u0026tag=1776177800"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238635"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776412783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232570"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776256858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776315466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh-tech-preview\u0026tag=1776177800"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:23:46+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:23:46+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:23:46+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:23:46+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:23:46+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:9453
Vulnerability from csaf_redhat - Published: 2026-04-21 17:29 - Updated: 2026-09-06 15:31Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.4
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.2.4
This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.2.4, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Fixes/Improvements:
Security Fix(es):
* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)
* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)
* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
Bug Fix(es):
* Ztunnel default value in operator contains older istio version (OSSM-13103)
* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 | — |
Workaround
|
Threats
Impact
Important
References
45 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh 3.2.4\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh 3.2.4, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)\n\n* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)\n\n* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\n* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nBug Fix(es):\n\n* Ztunnel default value in operator contains older istio version (OSSM-13103)\n\n* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9453",
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-25679",
"url": "https://access.redhat.com/security/cve/cve-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33186",
"url": "https://access.redhat.com/security/cve/cve-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33747",
"url": "https://access.redhat.com/security/cve/cve-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-33748",
"url": "https://access.redhat.com/security/cve/cve-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/cve-2026-34986",
"url": "https://access.redhat.com/security/cve/cve-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9453.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.4",
"tracking": {
"current_release_date": "2026-09-06T15:31:15+00:00",
"generator": {
"date": "2026-09-06T15:31:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9453",
"initial_release_date": "2026-04-21T17:29:36+00:00",
"revision_history": [
{
"date": "2026-04-21T17:29:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T15:31:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.2",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3A615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776677282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232405"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Af62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776291540"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3Acf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232170"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3Adfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232405"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776291540"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232170"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232405"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776291540"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232170"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3A1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Ac592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776238602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232405"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776178059"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Aa2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776291540"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776232170"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:29:36+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:29:36+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:29:36+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:29:36+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T17:29:36+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
rlsa-2026:19017
Vulnerability from osv_rocky
Published
2026-05-29 16:03
Modified
2026-06-12 12:06
Summary
Important: podman security update
Details
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
-
net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
-
github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
7.5 (High)
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:10",
"name": "podman",
"purl": "pkg:rpm/rocky-linux/podman?distro=rocky-linux-10-riscv64\u0026epoch=7"
},
"ranges": [
{
"database_specific": {
"yum_repository": "AppStream"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "7:5.8.2-1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:19017",
"modified": "2026-06-12T12:06:10.072384Z",
"published": "2026-05-29T16:03:24.060458Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:19017"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: podman security update",
"upstream": [
"CVE-2026-25679",
"CVE-2026-34986"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…