GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2026:22423

Vulnerability from csaf_redhat - Published: 2026-06-02 07:42 - Updated: 2026-09-16 18:20
Summary
Red Hat Security Advisory: Multicluster Global Hub 1.3.4 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.3.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-21728

A flaw was found in Tempo. A remote attacker can exploit this vulnerability by sending large queries to the Tempo service. This can lead to excessive memory allocations, potentially causing a Denial of Service (DoS) by impacting the availability of the service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le —
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 —
Threats
Impact Important
CVE-2026-25679

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1286 - Improper Validation of Syntactic Correctness of Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 —
Workaround
Threats
Impact Important
CVE-2026-27137

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-25679
Known not affected 17 products, the same list as for CVE-2026-25679
Threats
Impact Important
CVE-2026-32282

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.

7.8 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-25679
Known not affected 17 products, the same list as for CVE-2026-25679
Threats
Impact Moderate
CVE-2026-32283

A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-764 - Multiple Locks of a Critical Resource
Affected products
Fixed 4 products, the same list as for CVE-2026-25679
Known not affected 17 products, the same list as for CVE-2026-25679
Threats
Impact Important
CVE-2026-32285

A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-32286

A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a "slice bounds out of range panic", resulting in a Denial of Service (DoS) for the affected application.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 —
Workaround
Threats
Impact Moderate
CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 —
Workaround
Threats
Impact Important
CVE-2026-33487

A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-33815

A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.

8.3 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CWE-787 - Out-of-bounds Write
Affected products
Fixed 12 products, the same list as for CVE-2026-32286
Known not affected 9 products, the same list as for CVE-2026-32286
Threats
Impact Important
CVE-2026-33816

A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.

8.3 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CWE-787 - Out-of-bounds Write
Affected products
Fixed 12 products, the same list as for CVE-2026-32286
Known not affected 9 products, the same list as for CVE-2026-32286
Threats
Impact Important
CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41602

A flaw was found in the Apache Thrift TFramedTransport Go language implementation. This integer overflow or wraparound vulnerability could potentially allow an attacker to cause unexpected behavior or resource exhaustion, leading to a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41603

A flaw was found in Apache Thrift. This vulnerability involves improper validation of server certificates, where the hostname presented in the certificate does not match the expected hostname. A remote attacker could exploit this to impersonate a legitimate server, potentially intercepting or altering sensitive communications and leading to unauthorized access or information disclosure.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41604

A flaw was found in Apache Thrift. This out-of-bounds read vulnerability could allow an attacker to access memory outside of allocated bounds. This could lead to information disclosure or potentially a denial of service (DoS) condition.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41605

A flaw was found in Apache Thrift. This integer overflow or wraparound vulnerability could potentially lead to unexpected behavior or resource exhaustion, which may impact the availability or integrity of the system. The exact consequences depend on how the overflow is triggered and handled within the application.

7.7 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41606

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability exists, which could allow a remote attacker to trigger a Denial of Service (DoS) condition. This occurs when the affected component processes specially crafted input, leading to excessive resource consumption and system unavailability.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41607

A flaw was found in Apache Thrift. This out-of-bounds read vulnerability can lead to the disclosure of sensitive information or a denial of service.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
CVE-2026-41636

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Moderate
CVE-2026-43869

A flaw was found in Apache Thrift. This vulnerability involves improper validation of a certificate with a host mismatch, which could allow a remote attacker to bypass security checks. By presenting a specially crafted certificate, an attacker may impersonate a legitimate server or client. This could lead to a security bypass, potentially enabling unauthorized access or information disclosure.

7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-21728
Known not affected 17 products, the same list as for CVE-2026-21728
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:22423 self
https://access.redhat.com/security/cve/CVE-2026-21728 external
https://access.redhat.com/security/cve/CVE-2026-25679 external
https://access.redhat.com/security/cve/CVE-2026-27137 external
https://access.redhat.com/security/cve/CVE-2026-32282 external
https://access.redhat.com/security/cve/CVE-2026-32283 external
https://access.redhat.com/security/cve/CVE-2026-32285 external
https://access.redhat.com/security/cve/CVE-2026-32286 external
https://access.redhat.com/security/cve/CVE-2026-33186 external
https://access.redhat.com/security/cve/CVE-2026-33487 external
https://access.redhat.com/security/cve/CVE-2026-33815 external
https://access.redhat.com/security/cve/CVE-2026-33816 external
https://access.redhat.com/security/cve/CVE-2026-34986 external
https://access.redhat.com/security/cve/CVE-2026-41602 external
https://access.redhat.com/security/cve/CVE-2026-41603 external
https://access.redhat.com/security/cve/CVE-2026-41604 external
https://access.redhat.com/security/cve/CVE-2026-41605 external
https://access.redhat.com/security/cve/CVE-2026-41606 external
https://access.redhat.com/security/cve/CVE-2026-41607 external
https://access.redhat.com/security/cve/CVE-2026-41636 external
https://access.redhat.com/security/cve/CVE-2026-43869 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-21728 self
https://bugzilla.redhat.com/show_bug.cgi?id=2461395 external
https://www.cve.org/CVERecord?id=CVE-2026-21728 external
https://nvd.nist.gov/vuln/detail/CVE-2026-21728 external
https://grafana.com/security/security-advisories/… external
https://access.redhat.com/security/cve/CVE-2026-25679 self
https://bugzilla.redhat.com/show_bug.cgi?id=2445356 external
https://www.cve.org/CVERecord?id=CVE-2026-25679 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 external
https://go.dev/cl/752180 external
https://go.dev/issue/77578 external
https://groups.google.com/g/golang-announce/c/Edh… external
https://pkg.go.dev/vuln/GO-2026-4601 external
https://access.redhat.com/security/cve/CVE-2026-27137 self
https://bugzilla.redhat.com/show_bug.cgi?id=2445345 external
https://www.cve.org/CVERecord?id=CVE-2026-27137 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27137 external
https://go.dev/cl/752182 external
https://go.dev/issue/77952 external
https://pkg.go.dev/vuln/GO-2026-4599 external
https://access.redhat.com/security/cve/CVE-2026-32282 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456336 external
https://www.cve.org/CVERecord?id=CVE-2026-32282 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 external
https://go.dev/cl/763761 external
https://go.dev/issue/78293 external
https://groups.google.com/g/golang-announce/c/0uY… external
https://pkg.go.dev/vuln/GO-2026-4864 external
https://access.redhat.com/security/cve/CVE-2026-32283 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456338 external
https://www.cve.org/CVERecord?id=CVE-2026-32283 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 external
https://go.dev/cl/763767 external
https://go.dev/issue/78334 external
https://pkg.go.dev/vuln/GO-2026-4870 external
https://access.redhat.com/security/cve/CVE-2026-32285 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451846 external
https://www.cve.org/CVERecord?id=CVE-2026-32285 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32285 external
https://github.com/buger/jsonparser/issues/275 external
https://github.com/golang/vulndb/issues/4514 external
https://pkg.go.dev/vuln/GO-2026-4514 external
https://access.redhat.com/security/cve/CVE-2026-32286 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451847 external
https://www.cve.org/CVERecord?id=CVE-2026-32286 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32286 external
https://github.com/golang/vulndb/issues/4518 external
https://github.com/jackc/pgx/issues/2507 external
https://pkg.go.dev/vuln/GO-2026-4518 external
https://access.redhat.com/security/cve/CVE-2026-33186 self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833 external
https://www.cve.org/CVERecord?id=CVE-2026-33186 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186 external
https://github.com/grpc/grpc-go/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-33487 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451814 external
https://www.cve.org/CVERecord?id=CVE-2026-33487 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33487 external
https://github.com/russellhaering/goxmldsig/secur… external
https://access.redhat.com/security/cve/CVE-2026-33815 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455975 external
https://www.cve.org/CVERecord?id=CVE-2026-33815 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33815 external
https://pkg.go.dev/vuln/GO-2026-4771 external
https://access.redhat.com/security/cve/CVE-2026-33816 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455972 external
https://www.cve.org/CVERecord?id=CVE-2026-33816 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33816 external
https://pkg.go.dev/vuln/GO-2026-4772 external
https://access.redhat.com/security/cve/CVE-2026-34986 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455470 external
https://www.cve.org/CVERecord?id=CVE-2026-34986 external
https://nvd.nist.gov/vuln/detail/CVE-2026-34986 external
https://github.com/go-jose/go-jose/security/advis… external
https://pkg.go.dev/github.com/go-jose/go-jose/v4#… external
https://access.redhat.com/security/cve/CVE-2026-41602 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463407 external
https://www.cve.org/CVERecord?id=CVE-2026-41602 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41602 external
http://www.openwall.com/lists/oss-security/2026/04/28/6 external
https://lists.apache.org/thread/lb4j0zyd5f3g36cos… external
https://access.redhat.com/security/cve/CVE-2026-41603 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463411 external
https://www.cve.org/CVERecord?id=CVE-2026-41603 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41603 external
http://www.openwall.com/lists/oss-security/2026/04/28/7 external
https://access.redhat.com/security/cve/CVE-2026-41604 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463416 external
https://www.cve.org/CVERecord?id=CVE-2026-41604 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41604 external
http://www.openwall.com/lists/oss-security/2026/04/28/5 external
https://access.redhat.com/security/cve/CVE-2026-41605 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463418 external
https://www.cve.org/CVERecord?id=CVE-2026-41605 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41605 external
http://www.openwall.com/lists/oss-security/2026/04/28/4 external
https://access.redhat.com/security/cve/CVE-2026-41606 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463408 external
https://www.cve.org/CVERecord?id=CVE-2026-41606 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41606 external
http://www.openwall.com/lists/oss-security/2026/04/28/3 external
https://access.redhat.com/security/cve/CVE-2026-41607 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463412 external
https://www.cve.org/CVERecord?id=CVE-2026-41607 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41607 external
http://www.openwall.com/lists/oss-security/2026/04/28/2 external
https://access.redhat.com/security/cve/CVE-2026-41636 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463404 external
https://www.cve.org/CVERecord?id=CVE-2026-41636 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41636 external
http://www.openwall.com/lists/oss-security/2026/04/28/1 external
https://access.redhat.com/security/cve/CVE-2026-43869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2466660 external
https://www.cve.org/CVERecord?id=CVE-2026-43869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43869 external
https://lists.apache.org/thread/3hsgl1b69wzq3ry39… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.3.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:22423",
        "url": "https://access.redhat.com/errata/RHSA-2026:22423"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-21728",
        "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32286",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32286"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33487",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41602",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41603",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41603"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41604",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41604"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41605",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41605"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41606",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41606"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41607",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41607"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41636",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41636"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22423.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.3.4 security update",
    "tracking": {
      "current_release_date": "2026-09-16T18:20:04+00:00",
      "generator": {
        "date": "2026-09-16T18:20:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:22423",
      "initial_release_date": "2026-06-02T07:42:09+00:00",
      "revision_history": [
        {
          "date": "2026-06-02T07:42:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-16T18:20:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.3.4",
                "product": {
                  "name": "Multicluster Global Hub 1.3.4",
                  "product_id": "Multicluster Global Hub 1.3.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Aa1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1779925031"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adebed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ae8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ad5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21728",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T09:00:58.144273+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461395"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tempo. A remote attacker can exploit this vulnerability by sending large queries to the Tempo service. This can lead to excessive memory allocations, potentially causing a Denial of Service (DoS) by impacting the availability of the service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana/tempo: Tempo: Denial of Service via large queries",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461395",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461395"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-21728",
          "url": "https://grafana.com/security/security-advisories/cve-2026-21728"
        }
      ],
      "release_date": "2026-04-24T08:00:47.074000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana/tempo: Tempo: Denial of Service via large queries"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-27137",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-03-06T22:01:38.859733+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752182",
          "url": "https://go.dev/cl/752182"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77952",
          "url": "https://go.dev/issue/77952"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4599",
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "release_date": "2026-03-06T21:28:13.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-32283",
      "cwe": {
        "id": "CWE-764",
        "name": "Multiple Locks of a Critical Resource"
      },
      "discovery_date": "2026-04-08T02:01:16.213799+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763767",
          "url": "https://go.dev/cl/763767"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78334",
          "url": "https://go.dev/issue/78334"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4870",
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "release_date": "2026-04-08T01:06:57.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
    },
    {
      "cve": "CVE-2026-32285",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-03-26T20:01:54.925687+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://github.com/buger/jsonparser/issues/275",
          "url": "https://github.com/buger/jsonparser/issues/275"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/vulndb/issues/4514",
          "url": "https://github.com/golang/vulndb/issues/4514"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4514",
          "url": "https://pkg.go.dev/vuln/GO-2026-4514"
        }
      ],
      "release_date": "2026-03-26T19:40:51.837000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
    },
    {
      "cve": "CVE-2026-32286",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-03-26T20:01:59.226117+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The PostgreSQL server multicluster-globalhub-manager connects to is either provisioned by the operator itself or specified by the admin managing the deployment. To successfully exploit the vulnerability in this context the attacker would need to compromise the operator-deployed PostgreSQL server to force a crafted malicious DataRow message or they would need to have the privileges required to modify the operator-provisioned deployment or configure globalhub-manager to use a compromised/malicious \u201cBYO Postgres\u201d server.\n\nThe first scenario (compromising a legitimate PostgreSQL server) would change Attack Complexity from Low to High resulting in an adjusted CVSS v3.1 score of 5.9 (Moderate)\nThe other scenarios (manipulating the operator provisioned-deployment or configuring the globalhub-manager to use a malicious server) would maintain AC:L but would require privileged access. This would change Privileges Required from None to High resulting in an adjusted CVSS v3.1 score of 4.9 (Moderate)\n\nBased on the above the Impact Rating for multicluster-globalhub-manager-rhel9 is  Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32286",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/vulndb/issues/4518",
          "url": "https://github.com/golang/vulndb/issues/4518"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/issues/2507",
          "url": "https://github.com/jackc/pgx/issues/2507"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4518",
          "url": "https://pkg.go.dev/vuln/GO-2026-4518"
        }
      ],
      "release_date": "2026-03-26T19:40:51.974000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33487",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-26T18:02:32.278778+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451814"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451814",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451814"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33487",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc",
          "url": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc"
        }
      ],
      "release_date": "2026-03-26T17:17:51.101000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue"
    },
    {
      "cve": "CVE-2026-33815",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:25.130006+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455975"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4771",
          "url": "https://pkg.go.dev/vuln/GO-2026-4771"
        }
      ],
      "release_date": "2026-04-07T15:19:24.344000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-33816",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:14.142946+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4772",
          "url": "https://pkg.go.dev/vuln/GO-2026-4772"
        }
      ],
      "release_date": "2026-04-07T15:19:24.529000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact denial of service vulnerability in the Go JOSE library can be triggered by a crafted JSON Web Encryption (JWE) object specifying a key wrapping algorithm with an empty encrypted_key field, causing a panic and application crash. Applications that parse and decrypt JWE objects from untrusted sources are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    },
    {
      "cve": "CVE-2026-41602",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-28T10:01:16.099816+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Thrift TFramedTransport Go language implementation. This integer overflow or wraparound vulnerability could potentially allow an attacker to cause unexpected behavior or resource exhaustion, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/6",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/6"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:19:06.646000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation"
    },
    {
      "cve": "CVE-2026-41603",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-04-28T10:01:29.782287+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463411"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability involves improper validation of server certificates, where the hostname presented in the certificate does not match the expected hostname. A remote attacker could exploit this to impersonate a legitimate server, potentially intercepting or altering sensitive communications and leading to unauthorized access or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463411",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463411"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/7",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/7"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:19:40.564000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation"
    },
    {
      "cve": "CVE-2026-41604",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-28T10:01:47.903741+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463416"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This out-of-bounds read vulnerability could allow an attacker to access memory outside of allocated bounds. This could lead to information disclosure or potentially a denial of service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463416",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463416"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41604",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/5",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/5"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:20:13.996000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability"
    },
    {
      "cve": "CVE-2026-41605",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-28T10:01:54.269412+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463418"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This integer overflow or wraparound vulnerability could potentially lead to unexpected behavior or resource exhaustion, which may impact the availability or integrity of the system. The exact consequences depend on how the overflow is triggered and handled within the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463418",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463418"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41605",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41605",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/4",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/4"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:20:44.319000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability"
    },
    {
      "cve": "CVE-2026-41606",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-04-28T10:01:19.136351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability exists, which could allow a remote attacker to trigger a Denial of Service (DoS) condition. This occurs when the affected component processes specially crafted input, leading to excessive resource consumption and system unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41606",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41606",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/3",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/3"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:21:12.815000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion"
    },
    {
      "cve": "CVE-2026-41607",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-28T10:01:33.022623+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This out-of-bounds read vulnerability can lead to the disclosure of sensitive information or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41607",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41607",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/2",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/2"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:21:48.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability"
    },
    {
      "cve": "CVE-2026-41636",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-04-28T10:01:03.992199+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463404"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463404",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463404"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/1"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:22:14.639000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion"
    },
    {
      "cve": "CVE-2026-43869",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-05T08:00:56.417384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability involves improper validation of a certificate with a host mismatch, which could allow a remote attacker to bypass security checks. By presenting a specially crafted certificate, an attacker may impersonate a legitimate server or client. This could lead to a security bypass, potentially enabling unauthorized access or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r",
          "url": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r"
        }
      ],
      "release_date": "2026-05-05T07:25:48.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.