Vulnerability-Lookup

RHSA-2026:46885

Vulnerability from csaf_redhat - Published: 2026-07-27 16:35 - Updated: 2026-09-15 16:12

Summary

Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Severity

Critical

Notes

Topic: The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.

Details: The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-58183

A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-16242

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

9.4 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CWE-306 - Missing Authentication for Critical Function

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Critical

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33747

A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2025-58183

Known not affected 120 products, the same list as for CVE-2025-58183

Threats

Impact Moderate

CVE-2026-33748

A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2025-58183

Known not affected 120 products, the same list as for CVE-2025-58183

Threats

Impact Moderate

CVE-2026-33811

A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1341 - Multiple Releases of Same Resource or Handle

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 4 products, the same list as for CVE-2025-58183

Known not affected 120 products, the same list as for CVE-2025-58183

Threats

Impact Important

CVE-2026-39828

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39829

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Vendor Fix fix Workaround

Known not affected 116 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39830

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39835

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 4 products, the same list as for CVE-2026-39830

Known not affected 120 products, the same list as for CVE-2026-39830

Threats

Impact Important

CVE-2026-42508

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products, the same list as for CVE-2026-39828

Known not affected 120 products, the same list as for CVE-2026-39828

Threats

Impact Important

CVE-2026-44486

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64	—	Workaround

Threats

Impact Important

CVE-2026-44487

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44488

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44492

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-289 - Authentication Bypass by Alternate Name

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44494

A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44495

A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.

7.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44496

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-39828

Known not affected 120 products, the same list as for CVE-2026-39828

Threats

Impact Important

CVE-2026-44990

A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-44486

Known not affected 120 products, the same list as for CVE-2026-44486

Threats

Impact Important

References

162 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:46885	self
https://access.redhat.com/security/cve/CVE-2025-58183	external
https://access.redhat.com/security/cve/CVE-2026-16242	external
https://access.redhat.com/security/cve/CVE-2026-17107	external
https://access.redhat.com/security/cve/CVE-2026-33747	external
https://access.redhat.com/security/cve/CVE-2026-33748	external
https://access.redhat.com/security/cve/CVE-2026-33811	external
https://access.redhat.com/security/cve/CVE-2026-34986	external
https://access.redhat.com/security/cve/CVE-2026-39828	external
https://access.redhat.com/security/cve/CVE-2026-39829	external
https://access.redhat.com/security/cve/CVE-2026-39830	external
https://access.redhat.com/security/cve/CVE-2026-39835	external
https://access.redhat.com/security/cve/CVE-2026-42508	external
https://access.redhat.com/security/cve/CVE-2026-44486	external
https://access.redhat.com/security/cve/CVE-2026-44487	external
https://access.redhat.com/security/cve/CVE-2026-44488	external
https://access.redhat.com/security/cve/CVE-2026-44492	external
https://access.redhat.com/security/cve/CVE-2026-44494	external
https://access.redhat.com/security/cve/CVE-2026-44495	external
https://access.redhat.com/security/cve/CVE-2026-44496	external
https://access.redhat.com/security/cve/CVE-2026-44740	external
https://access.redhat.com/security/cve/CVE-2026-44990	external
https://access.redhat.com/security/cve/CVE-2026-59869	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-58183	self
https://bugzilla.redhat.com/show_bug.cgi?id=2407258	external
https://www.cve.org/CVERecord?id=CVE-2025-58183	external
https://nvd.nist.gov/vuln/detail/CVE-2025-58183	external
https://go.dev/cl/709861	external
https://go.dev/issue/75677	external
https://groups.google.com/g/golang-announce/c/4Em…	external
https://pkg.go.dev/vuln/GO-2025-4014	external
https://access.redhat.com/security/cve/CVE-2026-16242	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502690	external
https://www.cve.org/CVERecord?id=CVE-2026-16242	external
https://nvd.nist.gov/vuln/detail/CVE-2026-16242	external
https://github.com/openshift/hypershift/pull/9031	external
https://access.redhat.com/security/cve/CVE-2026-17107	self
https://bugzilla.redhat.com/show_bug.cgi?id=2506771	external
https://www.cve.org/CVERecord?id=CVE-2026-17107	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17107	external
https://access.redhat.com/security/cve/CVE-2026-33747	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452076	external
https://www.cve.org/CVERecord?id=CVE-2026-33747	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33747	external
https://github.com/moby/buildkit/releases/tag/v0.28.1	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-33748	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452271	external
https://www.cve.org/CVERecord?id=CVE-2026-33748	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33748	external
https://docs.docker.com/build/concepts/context/#u…	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-33811	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467822	external
https://www.cve.org/CVERecord?id=CVE-2026-33811	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33811	external
https://go.dev/cl/767860	external
https://go.dev/issue/78803	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4981	external
https://access.redhat.com/security/cve/CVE-2026-34986	self
https://bugzilla.redhat.com/show_bug.cgi?id=2455470	external
https://www.cve.org/CVERecord?id=CVE-2026-34986	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34986	external
https://github.com/go-jose/go-jose/security/advis…	external
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	external
https://access.redhat.com/security/cve/CVE-2026-39828	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480687	external
https://www.cve.org/CVERecord?id=CVE-2026-39828	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39828	external
https://go.dev/cl/781621	external
https://go.dev/issue/79562	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5014	external
https://access.redhat.com/security/cve/CVE-2026-39829	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480681	external
https://www.cve.org/CVERecord?id=CVE-2026-39829	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39829	external
https://go.dev/cl/781641	external
https://go.dev/cl/781661	external
https://go.dev/issue/79565	external
https://pkg.go.dev/vuln/GO-2026-5018	external
https://access.redhat.com/security/cve/CVE-2026-39830	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480684	external
https://www.cve.org/CVERecord?id=CVE-2026-39830	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39830	external
https://go.dev/cl/781640	external
https://go.dev/cl/781664	external
https://go.dev/issue/79564	external
https://pkg.go.dev/vuln/GO-2026-5017	external
https://access.redhat.com/security/cve/CVE-2026-39835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://www.cve.org/CVERecord?id=CVE-2026-39835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835	external
https://go.dev/cl/781660	external
https://go.dev/issue/79563	external
https://pkg.go.dev/vuln/GO-2026-5015	external
https://access.redhat.com/security/cve/CVE-2026-42508	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480688	external
https://www.cve.org/CVERecord?id=CVE-2026-42508	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42508	external
https://go.dev/cl/781220	external
https://go.dev/issue/79568	external
https://pkg.go.dev/vuln/GO-2026-5021	external
https://access.redhat.com/security/cve/CVE-2026-44486	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487947	external
https://www.cve.org/CVERecord?id=CVE-2026-44486	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44486	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44487	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487948	external
https://www.cve.org/CVERecord?id=CVE-2026-44487	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44487	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487949	external
https://www.cve.org/CVERecord?id=CVE-2026-44488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44488	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487938	external
https://www.cve.org/CVERecord?id=CVE-2026-44492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44492	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44494	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487942	external
https://www.cve.org/CVERecord?id=CVE-2026-44494	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44494	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44495	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487937	external
https://www.cve.org/CVERecord?id=CVE-2026-44495	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44495	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44496	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487943	external
https://www.cve.org/CVERecord?id=CVE-2026-44496	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44496	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44740	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894	external
https://www.cve.org/CVERecord?id=CVE-2026-44740	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740	external
https://github.com/go-git/go-billy/releases/tag/v5.9.0	external
https://github.com/go-git/go-billy/releases/tag/v…	external
https://github.com/go-git/go-billy/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-44990	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488565	external
https://www.cve.org/CVERecord?id=CVE-2026-44990	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44990	external
https://github.com/apostrophecms/apostrophe/secur…	external
https://access.redhat.com/security/cve/CVE-2026-59869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://www.cve.org/CVERecord?id=CVE-2026-59869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869	external
https://github.com/nodeca/js-yaml/commit/24f13e79…	external
https://github.com/nodeca/js-yaml/commit/59423c6f…	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	external
https://github.com/nodeca/js-yaml/security/adviso…	external

Acknowledgments

Microsoft Microsoft Security Research (MSRC)

Craftsman Software, Inc. Kahiro Okina

GitHub: arpitjain099 Arpit Jain

JSON

To clipboard

Loading 2.4 MB of JSON…

CVE-2026-44990 (GCVE-0-2026-44990)

Vulnerability from cvelistv5 – Published: 2026-06-12 20:39 – Updated: 2026-09-10 12:05

Title

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Summary

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a disallowed `xmp` element into live HTML or JavaScript. This is a sanitizer bypass in the default `disallowedTagsMode: 'discard'` path and can lead to stored XSS in applications that render sanitized output back to users. Version 2.17.4 patches the issue.

Severity

9.3 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-15 13:04 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M mitre root

References

31 references

URL	Tags
https://github.com/apostrophecms/apostrophe/secur…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44990	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488565	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36882	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46685	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63103	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63046	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48124	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51349	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

31 products

Vendor	Product	Version
apostrophecms	sanitize-html	Affected: < 2.17.4
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784312384 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911977 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786668856 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783351002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1785078604 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783348181 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783350952 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1785078581 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1783451729 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784578812 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908361 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787335105 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Container Native Virtualization 4.19	Unaffected: 1784844382 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.19::el9
Red Hat	Red Hat Container Native Virtualization 4.20	Unaffected: 1784629964 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1788350963 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1788359934 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1787746382 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1784737150 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785922764 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785956497 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785937325 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44990",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T13:04:32.468259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-15T13:04:56.814Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784312384",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786668856",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783351002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785078604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783348181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783350952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785078581",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783451729",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784578812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908361",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787335105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784844382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784629964",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788350963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788359934",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787746382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785922764",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785956497",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785937325",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "opentelemetry-collector-contrib",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-sanitize-html",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T20:39:47.065Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:05:09.696Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44990"
          },
          {
            "name": "RHBZ#2488565",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44990.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46685"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46598"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63103"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63046"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48124"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51349"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51196"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46685: Red Hat Container Native Virtualization 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46598: Red Hat Container Native Virtualization 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63103: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63046: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60441: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48124: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51349: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51196: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51197: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T21:02:24.911Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T20:39:47.065Z",
            "value": "Made public."
          }
        ],
        "title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "sanitize-html",
          "vendor": "apostrophecms",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.17.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a disallowed `xmp` element into live HTML or JavaScript. This is a sanitizer bypass in the default `disallowedTagsMode: \u0027discard\u0027` path and can lead to stored XSS in applications that render sanitized output back to users. Version 2.17.4 patches the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T20:39:47.065Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
        }
      ],
      "source": {
        "advisory": "GHSA-rpr9-rxv7-x643",
        "discovery": "UNKNOWN"
      },
      "title": "Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44990",
    "datePublished": "2026-06-12T20:39:47.065Z",
    "dateReserved": "2026-05-08T16:23:33.265Z",
    "dateUpdated": "2026-09-10T12:05:09.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59869 (GCVE-0-2026-59869)

Vulnerability from cvelistv5 – Published: 2026-07-08 15:15 – Updated: 2026-07-09 15:14

Title

js-yaml: YAML merge-key chains can force quadratic CPU consumption

Summary

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-09 15:14 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/nodeca/js-yaml/security/adviso…	x_refsource_CONFIRM
https://github.com/nodeca/js-yaml/commit/24f13e79…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/59423c6f…	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
nodeca	js-yaml	Affected: >= 3.0.0, < 3.15.0 Affected: >= 4.0.0, < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59869",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T15:14:16.302841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T15:14:29.753Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "js-yaml",
          "vendor": "nodeca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.15.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T15:15:54.675Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-52cp-r559-cp3m",
        "discovery": "UNKNOWN"
      },
      "title": "js-yaml: YAML merge-key chains can force quadratic CPU consumption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-59869",
    "datePublished": "2026-07-08T15:15:54.675Z",
    "dateReserved": "2026-07-07T15:41:53.607Z",
    "dateUpdated": "2026-07-09T15:14:29.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:46885

CVE-2026-44990 (GCVE-0-2026-44990)

CVE-2026-59869 (GCVE-0-2026-59869)

Tags

Sightings

Nomenclature