Vulnerability-Lookup

RHSA-2026:24833

Vulnerability from csaf_redhat - Published: 2026-06-09 13:57 - Updated: 2026-06-09 15:46

Summary

Red Hat Security Advisory: Red Hat Quay 3.17.3

Severity

Important

Notes

Topic: Red Hat Quay 3.17.3 is now available with bug fixes.

Details: Quay 3.17.3

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-32590

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x	—	Vendor Fix fix

Known not affected 27 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le		—

Threats

Impact Moderate

CVE-2026-32591

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

5.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x	—	Vendor Fix fix

Known not affected 27 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x		—
Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le		—

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:24833	self
https://access.redhat.com/security/cve/CVE-2026-32590	external
https://access.redhat.com/security/cve/CVE-2026-32591	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-32590	self
https://bugzilla.redhat.com/show_bug.cgi?id=2446964	external
https://www.cve.org/CVERecord?id=CVE-2026-32590	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32590	external
https://access.redhat.com/security/cve/CVE-2026-32591	self
https://bugzilla.redhat.com/show_bug.cgi?id=2446965	external
https://www.cve.org/CVERecord?id=CVE-2026-32591	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32591	external

Acknowledgments

Antony Di Scala Michael Whale

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.17.3 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.17.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:24833",
        "url": "https://access.redhat.com/errata/RHSA-2026:24833"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32590",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24833.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.17.3",
    "tracking": {
      "current_release_date": "2026-06-09T15:46:30+00:00",
      "generator": {
        "date": "2026-06-09T15:46:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:24833",
      "initial_release_date": "2026-06-09T13:57:35+00:00",
      "revision_history": [
        {
          "date": "2026-06-09T13:57:35+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-09T13:57:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-09T15:46:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.17",
                "product": {
                  "name": "Red Hat Quay 3.17",
                  "product_id": "Red Hat Quay 3.17",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.17::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ac7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1780949679"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ae9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1780949772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Ae45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1780949884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Aee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ae95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Ac04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3Aa86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1780949098"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Afe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1780949101"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1780604082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1780603696"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1780508896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1780949117"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3Ade281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1780604033"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64 as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x as a component of Red Hat Quay 3.17",
          "product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.17"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32590",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-03-12T14:43:11.443000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: remote code execution using pickle deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires valid login credentials. The attacker must be authenticated to the registry, either through the web interface or through a container tool such as Podman.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32590",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-09T13:57:35+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mirror-registry: remote code execution using pickle deserialization"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32591",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-03-12T15:09:38.210000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446965"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
          "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446965",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-09T13:57:35+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
    }
  ]
}

CVE-2026-32590 (GCVE-0-2026-32590)

Vulnerability from cvelistv5 – Published: 2026-04-08 17:04 – Updated: 2026-06-09 15:42

Title

Mirror-registry: remote code execution using pickle deserialization

Summary

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

redhat

References

10 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:19375	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21017	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22465	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22840	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23361	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-32590	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2446964	issue-trackingx_refsource_REDHAT

Impacted products

10 products

Vendor	Product	Version
Red Hat	Red Hat Quay 3.1	Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.14	Unaffected: 1779689392 , < * (rpm) cpe:/a:redhat:quay:3.14::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1780891395 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1779204086 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1779922205 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1780604033 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	mirror registry for Red Hat OpenShift	cpe:/a:redhat:mirror_registry:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2

Date Public

2026-04-08 00:00

Credits

Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32590",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T19:14:47.764287Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T19:14:55.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.10::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779822261",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.12::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.12",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779811412",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.14::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779689392",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1780891395",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel9",
          "product": "Red Hat Quay 3.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779204086",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel9",
          "product": "Red Hat Quay 3.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779922205",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel9",
          "product": "Red Hat Quay 3.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1780604033",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.9::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1779811473",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:mirror_registry:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/mirror-registry-rhel8",
          "product": "mirror registry for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:mirror_registry:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/mirror-registry-rhel8",
          "product": "mirror registry for Red Hat OpenShift 2",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
        }
      ],
      "datePublic": "2026-04-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T15:42:10.723Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:19375",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19375"
        },
        {
          "name": "RHSA-2026:21017",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21017"
        },
        {
          "name": "RHSA-2026:22465",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22465"
        },
        {
          "name": "RHSA-2026:22629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22629"
        },
        {
          "name": "RHSA-2026:22840",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22840"
        },
        {
          "name": "RHSA-2026:23361",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:23361"
        },
        {
          "name": "RHSA-2026:24833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        },
        {
          "name": "RHSA-2026:24853",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:24853"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
        },
        {
          "name": "RHBZ#2446964",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-12T14:43:11.443Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-08T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Mirror-registry: remote code execution using pickle deserialization",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-502: Deserialization of Untrusted Data"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-32590",
    "datePublished": "2026-04-08T17:04:22.870Z",
    "dateReserved": "2026-03-12T14:39:53.657Z",
    "dateUpdated": "2026-06-09T15:42:10.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32591 (GCVE-0-2026-32591)

Vulnerability from cvelistv5 – Published: 2026-04-08 17:06 – Updated: 2026-06-09 13:59

Title

Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

Summary

Severity

5.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

redhat

References

3 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:24833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-32591	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2446965	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Quay 3.17	Unaffected: 1780604033 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	mirror registry for Red Hat OpenShift	cpe:/a:redhat:mirror_registry:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Date Public

2026-04-08 00:00

Credits

Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32591",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-10T20:34:13.210994Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T14:52:42.383Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:quay:3.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel9",
          "product": "Red Hat Quay 3.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1780604033",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:mirror_registry:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/mirror-registry-rhel8",
          "product": "mirror registry for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:mirror_registry:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/mirror-registry-rhel8",
          "product": "mirror registry for Red Hat OpenShift 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
        }
      ],
      "datePublic": "2026-04-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T13:59:48.855Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:24833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:24833"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
        },
        {
          "name": "RHBZ#2446965",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-12T15:09:38.210Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-08T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-32591",
    "datePublished": "2026-04-08T17:06:58.222Z",
    "dateReserved": "2026-03-12T14:39:53.657Z",
    "dateUpdated": "2026-06-09T13:59:48.855Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:24833

CVE-2026-32590 (GCVE-0-2026-32590)

CVE-2026-32591 (GCVE-0-2026-32591)

Tags

Sightings

Nomenclature