{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:47149",
        "url": "https://access.redhat.com/errata/RHSA-2026:47149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43870"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46384"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47149.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update",
    "tracking": {
      "current_release_date": "2026-07-29T16:56:46+00:00",
      "generator": {
        "date": "2026-07-29T16:56:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:47149",
      "initial_release_date": "2026-07-28T13:38:43+00:00",
      "revision_history": [
        {
          "date": "2026-07-28T13:38:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-28T13:38:48+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-29T16:56:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.7.2",
                "product": {
                  "name": "Multicluster Global Hub 1.7.2",
                  "product_id": "Multicluster Global Hub 1.7.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Af02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aa0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Aad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784913705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aaba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ad550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ad5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ace99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ab009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x as a component of Multicluster Global Hub 1.7.2",
          "product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33376",
      "cwe": {
        "id": "CWE-183",
        "name": "Permissive List of Allowed Inputs"
      },
      "discovery_date": "2026-05-13T20:02:51.602978+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477262"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477262",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33376"
        }
      ],
      "release_date": "2026-05-13T19:28:34.473000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
    },
    {
      "cve": "CVE-2026-33377",
      "cwe": {
        "id": "CWE-267",
        "name": "Privilege Defined With Unsafe Actions"
      },
      "discovery_date": "2026-05-13T20:02:01.027996+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477246"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477246",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
          "url": "https://grafana.com/security/security-advisories/cve-2026-33377"
        }
      ],
      "release_date": "2026-05-13T19:28:28.154000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-42151",
      "cwe": {
        "id": "CWE-256",
        "name": "Plaintext Storage of a Password"
      },
      "discovery_date": "2026-05-04T19:02:26.983660+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466507"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466507",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18587",
          "url": "https://github.com/prometheus/prometheus/pull/18587"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18590",
          "url": "https://github.com/prometheus/prometheus/pull/18590"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
        }
      ],
      "release_date": "2026-05-04T18:12:16.917000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
    },
    {
      "cve": "CVE-2026-42154",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-04T19:02:19.626646+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18584",
          "url": "https://github.com/prometheus/prometheus/pull/18584"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18585",
          "url": "https://github.com/prometheus/prometheus/pull/18585"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
        }
      ],
      "release_date": "2026-05-04T18:13:12.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
    },
    {
      "cve": "CVE-2026-43870",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-05-05T09:01:02.388589+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466671"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466671",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
          "url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
        }
      ],
      "release_date": "2026-05-05T07:45:35.699000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
    },
    {
      "cve": "CVE-2026-46384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-29T21:02:03.061736+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483482"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483482",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
        },
        {
          "category": "external",
          "summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
        }
      ],
      "release_date": "2026-05-29T19:58:21.535000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
    },
    {
      "cve": "CVE-2026-46385",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-05-29T21:01:37.087371+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
        },
        {
          "category": "external",
          "summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
        }
      ],
      "release_date": "2026-05-29T19:58:59.667000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
    },
    {
      "cve": "CVE-2026-53488",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-07-01T02:01:09.589815+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "release_date": "2026-07-01T00:11:20.610000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-55677",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-26T17:01:45.110038+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
          "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
        },
        {
          "category": "external",
          "summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
          "url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
        }
      ],
      "release_date": "2026-06-26T16:15:55.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T13:38:43+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47149"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
            "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
    }
  ]
}