RHSA-2026:10158

Vulnerability from csaf_redhat - Published: 2026-04-23 14:13 - Updated: 2026-04-24 18:04
Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.7.2
Details: Releases of Red Hat OpenShift Builds 1.7.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2025-68121

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
CVE-2026-25679

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1286 - Improper Validation of Syntactic Correctness of Input
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVE-2026-27137

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-295 - Improper Certificate Validation
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
Workaround To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.
CVE-2026-33211

A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.

9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
Workaround To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod's filesystem.
CVE-2026-33810

A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Vendor Fix It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2 https://access.redhat.com/errata/RHSA-2026:10158
References
https://access.redhat.com/errata/RHSA-2026:10158 self
https://access.redhat.com/security/cve/CVE-2025-68121 external
https://access.redhat.com/security/cve/CVE-2026-25679 external
https://access.redhat.com/security/cve/CVE-2026-27137 external
https://access.redhat.com/security/cve/CVE-2026-33186 external
https://access.redhat.com/security/cve/CVE-2026-33211 external
https://access.redhat.com/security/cve/CVE-2026-33810 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/builds_f… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2025-68121 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437111 external
https://www.cve.org/CVERecord?id=CVE-2025-68121 external
https://nvd.nist.gov/vuln/detail/CVE-2025-68121 external
https://go.dev/cl/737700 external
https://go.dev/issue/77217 external
https://groups.google.com/g/golang-announce/c/K09… external
https://pkg.go.dev/vuln/GO-2026-4337 external
https://access.redhat.com/security/cve/CVE-2026-25679 self
https://bugzilla.redhat.com/show_bug.cgi?id=2445356 external
https://www.cve.org/CVERecord?id=CVE-2026-25679 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 external
https://go.dev/cl/752180 external
https://go.dev/issue/77578 external
https://groups.google.com/g/golang-announce/c/Edh… external
https://pkg.go.dev/vuln/GO-2026-4601 external
https://access.redhat.com/security/cve/CVE-2026-27137 self
https://bugzilla.redhat.com/show_bug.cgi?id=2445345 external
https://www.cve.org/CVERecord?id=CVE-2026-27137 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27137 external
https://go.dev/cl/752182 external
https://go.dev/issue/77952 external
https://pkg.go.dev/vuln/GO-2026-4599 external
https://access.redhat.com/security/cve/CVE-2026-33186 self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833 external
https://www.cve.org/CVERecord?id=CVE-2026-33186 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186 external
https://github.com/grpc/grpc-go/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-33211 self
https://bugzilla.redhat.com/show_bug.cgi?id=2450554 external
https://www.cve.org/CVERecord?id=CVE-2026-33211 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33211 external
https://github.com/tektoncd/pipeline/commit/10fa5… external
https://github.com/tektoncd/pipeline/commit/31800… external
https://github.com/tektoncd/pipeline/commit/3ca7b… external
https://github.com/tektoncd/pipeline/commit/96138… external
https://github.com/tektoncd/pipeline/commit/b1fee… external
https://github.com/tektoncd/pipeline/commit/cdb4e… external
https://github.com/tektoncd/pipeline/commit/ec775… external
https://github.com/tektoncd/pipeline/security/adv… external
https://access.redhat.com/security/cve/CVE-2026-33810 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456335 external
https://www.cve.org/CVERecord?id=CVE-2026-33810 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33810 external
https://go.dev/cl/763763 external
https://go.dev/issue/78332 external
https://groups.google.com/g/golang-announce/c/0uY… external
https://pkg.go.dev/vuln/GO-2026-4866 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Builds 1.7.2",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Releases of Red Hat OpenShift Builds 1.7.2",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:10158",
        "url": "https://access.redhat.com/errata/RHSA-2026:10158"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33211"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7",
        "url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10158.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2",
    "tracking": {
      "current_release_date": "2026-04-24T18:04:06+00:00",
      "generator": {
        "date": "2026-04-24T18:04:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2026:10158",
      "initial_release_date": "2026-04-23T14:13:54+00:00",
      "revision_history": [
        {
          "date": "2026-04-23T14:13:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-23T14:14:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-24T18:04:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Builds 1.7.1",
                "product": {
                  "name": "Red Hat OpenShift Builds 1.7.1",
                  "product_id": "Red Hat OpenShift Builds 1.7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_builds:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Builds"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937971"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Af2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Aeb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ab020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Acd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aa4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ab39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ab2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ae593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x as a component of Red Hat OpenShift Builds 1.7.1",
          "product_id": "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-68121",
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-27137",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-03-06T22:01:38.859733+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752182",
          "url": "https://go.dev/cl/752182"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77952",
          "url": "https://go.dev/issue/77952"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4599",
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "release_date": "2026-03-06T21:28:13.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33211",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-03-24T00:02:20.093480+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450554"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33211"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
          "url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
          "url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
          "url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
          "url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
          "url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
          "url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
          "url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
        }
      ],
      "release_date": "2026-03-23T23:55:54.089000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
    },
    {
      "cve": "CVE-2026-33810",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-04-08T02:01:09.100830+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456335"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
          "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456335",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763763",
          "url": "https://go.dev/cl/763763"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78332",
          "url": "https://go.dev/issue/78332"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4866",
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "release_date": "2026-04-08T01:06:56.546000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-23T14:13:54+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
            "Red Hat OpenShift Builds 1.7.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.