RHSA-2026:3884
Vulnerability from csaf_redhat - Published: 2026-03-05 12:07 - Updated: 2026-03-09 21:40Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.2 security update
Notes
Topic
Important: Red Hat OpenShift GitOps v1.19.2 security update
Details
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-8874 (CVE-2025-13465 openshift-gitops-1/console-plugin-rhel8: prototype pollution in _.unset and _.omit functions [gitops-1.19])
* GITOPS-8993 (CVE-2025-61726 openshift-gitops-1/argo-rollouts-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8994 (CVE-2025-61726 openshift-gitops-1/argocd-agent-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8995 (CVE-2025-61726 openshift-gitops-1/argocd-image-updater-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8996 (CVE-2025-61726 openshift-gitops-1/argocd-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8997 (CVE-2025-61726 openshift-gitops-1/argocd-rhel9: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8998 (CVE-2025-61726 openshift-gitops-1/dex-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8999 (CVE-2025-61726 openshift-gitops-1/gitops-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])
* GITOPS-8949 (CVE-2025-61728 openshift-gitops-1/argocd-image-updater-rhel8: Excessive CPU consumption when building archive index in archive/zip [gitops-1.19])
* GITOPS-9017 (CVE-2025-61729 openshift-gitops-1/dex-rhel8: golang: Denial of Service due to excessive resource consumption via crafted certificate [gitops-1.19])
* GITOPS-9064 (CVE-2025-68121 openshift-gitops-1/dex-rhel8: Unexpected session resumption in crypto/tls [gitops-1.19])
* GITOPS-8685 (CVE-2026-21441 openshift-gitops-1/console-plugin-rhel8: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) [gitops-1.19])
* GITOPS-8773 (Console plugin Applications page is broken with cannot read properties of undefined JS error)
* GITOPS-8922 (ApplicationSet cluster scoped roles missing permissions)
* GITOPS-9060 (Restrict ImageUpdater Scope to Local Namespace - z-stream)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.19.2 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-8874 (CVE-2025-13465 openshift-gitops-1/console-plugin-rhel8: prototype pollution in _.unset and _.omit functions [gitops-1.19])\n* GITOPS-8993 (CVE-2025-61726 openshift-gitops-1/argo-rollouts-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8994 (CVE-2025-61726 openshift-gitops-1/argocd-agent-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8995 (CVE-2025-61726 openshift-gitops-1/argocd-image-updater-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8996 (CVE-2025-61726 openshift-gitops-1/argocd-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8997 (CVE-2025-61726 openshift-gitops-1/argocd-rhel9: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8998 (CVE-2025-61726 openshift-gitops-1/dex-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8999 (CVE-2025-61726 openshift-gitops-1/gitops-rhel8: Memory exhaustion in query parameter parsing in net/url [gitops-1.19])\n* GITOPS-8949 (CVE-2025-61728 openshift-gitops-1/argocd-image-updater-rhel8: Excessive CPU consumption when building archive index in archive/zip [gitops-1.19])\n* GITOPS-9017 (CVE-2025-61729 openshift-gitops-1/dex-rhel8: golang: Denial of Service due to excessive resource consumption via crafted certificate [gitops-1.19])\n* GITOPS-9064 (CVE-2025-68121 openshift-gitops-1/dex-rhel8: Unexpected session resumption in crypto/tls [gitops-1.19])\n* GITOPS-8685 (CVE-2026-21441 openshift-gitops-1/console-plugin-rhel8: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) [gitops-1.19])\n* GITOPS-8773 (Console plugin Applications page is broken with cannot read properties of undefined JS error)\n* GITOPS-8922 (ApplicationSet cluster scoped roles missing permissions)\n* GITOPS-9060 (Restrict ImageUpdater Scope to Local Namespace - z-stream)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:3884",
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3884.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.2 security update",
"tracking": {
"current_release_date": "2026-03-09T21:40:12+00:00",
"generator": {
"date": "2026-03-09T21:40:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.2"
}
},
"id": "RHSA-2026:3884",
"initial_release_date": "2026-03-05T12:07:11+00:00",
"revision_history": [
{
"date": "2026-03-05T12:07:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-03-05T12:07:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-09T21:40:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.19",
"product": {
"name": "Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.19::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Ae47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Acac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Aea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772448378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Af92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772447156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446449"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772450268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445393"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Ad1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Aaeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772448378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772447156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Aed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446449"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445393"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Aa4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Ad79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ac4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772448378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772447156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Aae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446449"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445393"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446597"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Af992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Ad193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772444855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772448378"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772447156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772446449"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1\u0026tag=1772445393"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Unexpected session resumption in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Unexpected session resumption in crypto/tls"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-05T12:07:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:138be82b54de000e765bee3b77ecedb271228e720d8195f4dd6adcf5ec4c50bc_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2e1362c72a0d6887a940a0bdf26b6bce9eb510064700e9f095c408abbd49c9bf_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:5ffdb073886df729a401b3b11c192f6fa1cf300dc72735f59a7b087dbfbe64d1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a4b401970e2f2392983adf4e4fdc02b5219cd007f6fab853a5e77e65b504ff14_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:62df2a36dcf0e875d62882fd22ac10df0577e6edf1593c5a2cb425287ea747d1_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:826d6f6528ded7c7d06bda756db80b65a85dccc845da6e9549f292e15bbe1e62_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:cac9de88e325bdcd774e47416349cd04d9485140ba2757789af7ece0bfdc5f10_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f992bca52fbfa76a67b07d3cf5a7921234dbf4765d77acddc3b53c7cd6c6af4e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:86daebba4143bbc47fbe21fd201fd4724dd58a235e6880b872eabdc62d74323d_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:92123645a6195209ae1159cc3366f7d937773aa47ce4b2d95e071994e7ad5326_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d193023a0943e711f3a4ac3fa541d2996c0e49f4fc3df380e0c3d203d9447d9c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ead132dfd8d85e9b2abfa332c6da9c7354b09eebcb2e3aa13f0376c6ac32562d_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:2c9c09665cdfe0d15496232eecb98d8a8a0ec415e31162113e022de9729653ab_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c7f4f07f63ec65cea08d79a3216d1281ab4e30116e9eba68f6196680e90ff7b_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:733cd034e950192fc651610d5d8f0e3eb0d0e8cbb6d27efbec297446854b36c1_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:d1e3f3cc9aae3466975e4d6e7699a5f098538df9f831492a9b49be2fec49b7a8_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:78d1ebdf50b49e4acce49cf9de00e2a0f38efa00df5e44d359eaf7fedb13cab9_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7d86d3ca3e7973f9d03d938977fb5486c009a7a2f6a342ef806078ed04eb9946_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:d79ab12f0505b689e03a04952ddb4b8cb096a544742195443e17f040edc64778_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:e47bf6b1a868b557ae88ff0a284711ea5c9379bcc2bbefdcbd3ab501b4c3232d_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3fa5c0abd247240801d6b92d01579587472a219465c229f9d73c8a2245610a70_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:aeccbbcdb0f4311c3c2f1408f6e72fbfb73273138f3fddd7f3b678e71ee7f3e7_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c4efd2edea9a977c138a7af1fb2aa0363b9a880091332b6a0797028dd3afc3a8_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ea4f3f8e721945a2ca03156e50b1b76aabf2ebef72fb9db57eebf526b730f5a4_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4e2e35b6afc23e853e907050b82f405c6d207891728ff93b466066f99f970c64_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90a212ffbf689c1c9d0f8afaef542cf4cd9feb8da72391effef4f108b91f859c_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9c6a85524d75533871329af0b6dfa089f443286399c375501d595b3f8a4a56e1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f92a748e4817a870c7569e23e5b932bac130e1d0d73a6a4de77f4f29e5e496cb_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:0cae9c459339fc3c6a81664cb29927be1948ac162ed2c7d03189d12fbf66b89a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:1c28dbd5f4f8ae64c154701712918c70a52f3bbf778134bcac730ac8eb13927a_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:4c572caa0d2e8a75b3649efb4bc1d0dd00ce0d07272904de2db102713a44d8c0_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ae393beb1e5b23747e3ace0d4bbd508a527ae03d6110dc66bd63b3a5ad30d949_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:00e866aafc577f084f3bc233becd9dac15404831189a122c362112791411a796_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:36bd74ee180fa7d46ac0724f6f1d6c248f017bc69d80750665b820f6c6684a13_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:55528ebf8f834c4c75412edc02e843bb6cbfdfacfa0592f8207792e8550d4bff_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5cd649d78637066890ba3af1963dbfb3be9b51f7f43e7a501a38e1fc1355f77b_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:994a659056aaed2c2e07b703afbc340deeda017369b476f64a24fa4098bb40ea_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:205ce0b74260a20a4d354ca3389ebf1b652d783b3d2207e5fdf207c559277923_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7850be031957aa5cae31c89d3e460081eeca1af89ee2c5991908e90261e1804e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:9e0fb76618eb0da7b081c1b4d9e80e945b6f2d586dc2e010355454425d6f0904_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ed23c99b468e0ca372ce60af126c454e744df44d1a6251640244d7c207843dce_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:1670185c7ff51b07280157424fefb192554dac53c9065f309d4b9decb2423bb1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:65d6682940dac0f4f0f8153c26e9497f4e1bb3c9b57528ca2901d73df9499120_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6657305ece826ffc36b4f6ed48fd438a72bc4366c4b88d7d4d724a495496b201_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:69a1224c7a74cf4ba40b074b3eca5aecde4d91cf11c17f87b1cb796ebfb488d0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…