rhsa-2021_0516
Vulnerability from csaf_redhat
Published
2021-02-18 00:02
Modified
2024-12-08 11:54
Summary
Red Hat Security Advisory: Release of OpenShift Serverless 1.13.0 security update

Notes

Topic
Release of OpenShift Serverless 1.13.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.
Details
Red Hat OpenShift Serverless 1.13.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform version 4.6, and includes security and bug fixes and enhancements. For more information, see the documentation listed in the References section. Security Fix(es): * jwt-go: access restriction bypass vulnerability (CVE-2020-26160) For more details about the security issues and their impact, the CVSS score, acknowledgements, and other related information, see the CVE pages listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Release of OpenShift Serverless 1.13.0\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each\nvulnerability. For more information, see the CVE links in the References\nsection.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Serverless 1.13.0 is a generally available release of the\nOpenShift Serverless Operator.\n\nThis version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform version 4.6, and includes security and bug fixes and enhancements. For more information, see the documentation listed in the References section.\n\nSecurity Fix(es):\n\n* jwt-go: access restriction bypass vulnerability (CVE-2020-26160)\n\nFor more details about the security issues and their impact, the CVSS\nscore, acknowledgements, and other related information, see the CVE pages\nlisted in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:0516",
        "url": "https://access.redhat.com/errata/RHSA-2021:0516"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index",
        "url": "https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index"
      },
      {
        "category": "external",
        "summary": "1883371",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1883371"
      },
      {
        "category": "external",
        "summary": "1919046",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1919046"
      },
      {
        "category": "external",
        "summary": "1919047",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1919047"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0516.json"
      }
    ],
    "title": "Red Hat Security Advisory: Release of OpenShift Serverless 1.13.0 security update",
    "tracking": {
      "current_release_date": "2024-12-08T11:54:05+00:00",
      "generator": {
        "date": "2024-12-08T11:54:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2021:0516",
      "initial_release_date": "2021-02-18T00:02:32+00:00",
      "revision_history": [
        {
          "date": "2021-02-18T00:02:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-02-18T00:02:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-08T11:54:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Openshift Serverless 1.13",
                "product": {
                  "name": "Openshift Serverless 1.13",
                  "product_id": "8Base-Openshift-Serverless-1.13",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:serverless:1.13::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Serverless"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
                "product": {
                  "name": "openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
                  "product_id": "openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/client-kn-rhel8\u0026tag=0.19.1-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
                  "product_id": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
                  "product_id": "openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-controller-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
                  "product_id": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-in-memory-channel-controller-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
                  "product_id": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtbroker-filter-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtbroker-ingress-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtchannel-broker-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtping-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
                  "product_id": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-storage-version-migration-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
                  "product_id": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-sugar-controller-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
                  "product_id": "openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-webhook-rhel8\u0026tag=0.19.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
                "product": {
                  "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
                  "product_id": "openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/ingress-rhel8-operator\u0026tag=1.13.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
                "product": {
                  "name": "openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
                  "product_id": "openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/knative-rhel8-operator\u0026tag=1.13.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
                "product": {
                  "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
                  "product_id": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/kn-cli-artifacts-rhel8\u0026tag=0.19.1-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
                "product": {
                  "name": "openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
                  "product_id": "openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/kourier-control-rhel8\u0026tag=0.19.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64",
                "product": {
                  "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64",
                  "product_id": "openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/svls-must-gather-rhel8\u0026tag=1.13.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
                "product": {
                  "name": "openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
                  "product_id": "openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serverless-operator-bundle\u0026tag=1.13.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
                "product": {
                  "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
                  "product_id": "openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serverless-rhel8-operator\u0026tag=1.13.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
                  "product_id": "openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-activator-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
                  "product_id": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-autoscaler-hpa-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
                  "product_id": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-autoscaler-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
                  "product_id": "openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-controller-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
                  "product_id": "openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-domain-mapping-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
                  "product_id": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-domain-mapping-webhook-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
                  "product_id": "openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-queue-rhel8\u0026tag=0.19.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
                  "product_id": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-storage-version-migration-rhel8\u0026tag=0.19.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
                  "product_id": "openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-webhook-rhel8\u0026tag=0.19.0-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64"
        },
        "product_reference": "openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64"
        },
        "product_reference": "openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64"
        },
        "product_reference": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64"
        },
        "product_reference": "openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64"
        },
        "product_reference": "openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64"
        },
        "product_reference": "openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64"
        },
        "product_reference": "openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64 as a component of Openshift Serverless 1.13",
          "product_id": "8Base-Openshift-Serverless-1.13:openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64"
        },
        "product_reference": "openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.13"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-26160",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2020-09-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1883371"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in jwt-go where it is vulnerable to Access Restriction Bypass if m[\"aud\"] happens to be []string{}, as allowed by the spec, the type assertion fails and the value of aud is \"\". This can cause audience verification to succeed even if the audiences being passed are incorrect if required is set to false.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jwt-go: access restriction bypass vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The github.com/dgrijalva/jwt-go module is an indirect dependency of the k8s.io/client-go module pulled into Quay Bridge, and Setup operators via the Operator\u0027s SDK generated code. The k8s.io/client-go module does not use jwt-go in an unsafe way [1]. Red Hat Quay components have been marked as wontfix. This may be fixed in the future.\n\nSimilar to Quay, multiple OpenShift Container Platform (OCP) containers include jwt-go as a transient dependency due to go-autorest [1]. As such, those containers do not use jwt-go in an unsafe way. They have been marked wontfix at this time and may be fixed in a future update.\n\nSame as Quay and OpenShift Container Platform, components shipped with Red Hat OpenShift Container Storage 4 do not use jwt-go in an unsafe way and hence this issue has been rated as having a security impact of Low. A future update may address this issue.\n\nRed Hat Gluster Storage 3 shipped multi-cloud-object-gateway-cli as a technical preview and is not currently planned to be addressed in future updates, hence the multi-cloud-object-gateway-cli package will not be fixed.\n\n[1] https://github.com/Azure/go-autorest/issues/568#issuecomment-703804062",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
          "8Base-Openshift-Serverless-1.13:openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-26160"
        },
        {
          "category": "external",
          "summary": "RHBZ#1883371",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1883371"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-26160",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26160"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-26160",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26160"
        },
        {
          "category": "external",
          "summary": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515",
          "url": "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515"
        }
      ],
      "release_date": "2020-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-02-18T00:02:32+00:00",
          "details": "See the documentation at:\nhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index",
          "product_ids": [
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:0516"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64",
            "8Base-Openshift-Serverless-1.13:openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jwt-go: access restriction bypass vulnerability"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.