Vulnerability-Lookup

RHSA-2026:48913

Vulnerability from csaf_redhat - Published: 2026-07-30 18:55 - Updated: 2026-08-04 21:57

Summary

Red Hat Security Advisory: RHACS 4.10.6 security and bug fix update

Severity

Important

Notes

Topic: Updated images are now available for Red Hat Advanced Cluster Security (RHACS), which typically include new features, bug fixes, and/or security patches.

Details: See the release notes (link in the references section) for a description of the fixes and enhancements in this particular release.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix Workaround

Known not affected 43 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64	—	Workaround

Threats

Impact Important

CVE-2026-41889

A flaw was found in pgx, a PostgreSQL driver and toolkit for Go. This SQL injection vulnerability can occur when using the non-default simple protocol, a dollar-quoted string literal in the SQL query, and when that string literal contains text interpreted as a placeholder with an attacker-controlled value. An attacker could potentially manipulate SQL queries, leading to a low impact on data integrity.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix Workaround

Known not affected 43 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-49478

A flaw was found in Fulcio's OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive cluster credentials.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix Workaround

Known not affected 43 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-49978

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a <template>.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix

Known not affected 43 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64		—

Threats

Impact Important

CVE-2026-50163

A flaw was found in oras-go, a Go library used for managing OCI (Open Container Initiative) artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to files outside the intended extraction location, specifically within the victim's current working directory. This allows an attacker to read sensitive information from the system, and in some cases, could lead to unauthorized access to critical system files if the component is operating with elevated privileges.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix Workaround

Known not affected 43 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Vendor Fix fix

Known not affected 43 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64		—

Threats

Impact Important

CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x	—	Vendor Fix fix Workaround

Known not affected 43 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64	—	Workaround

Threats

Impact Important

References

55 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:48913	self
https://access.redhat.com/security/cve/CVE-2026-13149	external
https://access.redhat.com/security/cve/CVE-2026-41889	external
https://access.redhat.com/security/cve/CVE-2026-49478	external
https://access.redhat.com/security/cve/CVE-2026-49978	external
https://access.redhat.com/security/cve/CVE-2026-50163	external
https://access.redhat.com/security/cve/CVE-2026-53492	external
https://access.redhat.com/security/cve/CVE-2026-59869	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-13149	self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813	external
https://www.cve.org/CVERecord?id=CVE-2026-13149	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149	external
https://github.com/juliangruber/brace-expansion/c…	external
https://www.npmjs.com/package/brace-expansion	external
https://access.redhat.com/security/cve/CVE-2026-41889	self
https://bugzilla.redhat.com/show_bug.cgi?id=2468307	external
https://www.cve.org/CVERecord?id=CVE-2026-41889	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41889	external
https://github.com/jackc/pgx/commit/60644f84918a8…	external
https://github.com/jackc/pgx/releases/tag/v5.9.2	external
https://github.com/jackc/pgx/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-49478	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499690	external
https://www.cve.org/CVERecord?id=CVE-2026-49478	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49478	external
https://github.com/sigstore/fulcio/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-49978	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500695	external
https://www.cve.org/CVERecord?id=CVE-2026-49978	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49978	external
https://github.com/cure53/DOMPurify/commit/ca30f0…	external
https://github.com/cure53/DOMPurify/releases/tag/3.4.7	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-50163	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499695	external
https://www.cve.org/CVERecord?id=CVE-2026-50163	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50163	external
https://github.com/oras-project/oras-go/security/…	external
https://access.redhat.com/security/cve/CVE-2026-53492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496130	external
https://www.cve.org/CVERecord?id=CVE-2026-53492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53492	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-59869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://www.cve.org/CVERecord?id=CVE-2026-59869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869	external
https://github.com/nodeca/js-yaml/commit/24f13e79…	external
https://github.com/nodeca/js-yaml/commit/59423c6f…	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	external
https://github.com/nodeca/js-yaml/security/adviso…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:48913",
        "url": "https://access.redhat.com/errata/RHSA-2026:48913"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41889",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41889"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49478",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49478"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49978",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50163",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50163"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4106_release-notes-410",
        "url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4106_release-notes-410"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48913.json"
      }
    ],
    "title": "Red Hat Security Advisory: RHACS 4.10.6 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-08-04T21:57:20+00:00",
      "generator": {
        "date": "2026-08-04T21:57:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2026:48913",
      "initial_release_date": "2026-07-30T18:55:57+00:00",
      "revision_history": [
        {
          "date": "2026-07-30T18:55:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-01T08:08:43+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-04T21:57:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "product": {
                  "name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                  "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ac19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Abdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784282883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-fact-rhel8@sha256%3Ad4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1784294375"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ab8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256%3A96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785420959"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Af8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784282883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-fact-rhel8@sha256%3Ae1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1784294375"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Acdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Aaf0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Ae8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Af0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785420959"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ab1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ad249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784282883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ae0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Aff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aaba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Abf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785420959"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Aae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ad595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784282883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Afb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ac49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ab28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784785682"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785420959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785420959"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
          "product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-41889",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2026-05-08T17:01:09.435496+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pgx, a PostgreSQL driver and toolkit for Go. This SQL injection vulnerability can occur when using the non-default simple protocol, a dollar-quoted string literal in the SQL query, and when that string literal contains text interpreted as a placeholder with an attacker-controlled value. An attacker could potentially manipulate SQL queries, leading to a low impact on data integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this flaw as Moderate because the SQL injection vulnerability in pgx can only be triggered when the non-default simple protocol is used in conjunction with specific query constructions involving PostgreSQL dollar-quoted string literals. Successful exploitation requires multiple uncommon preconditions, including attacker control of placeholder values within affected queries. As the issue is limited to particular application usage patterns and does not affect default pgx configurations, the overall risk is reduced despite the potential for query manipulation in vulnerable applications.The strongest argument for a Moderate rating is that this is not a generic SQL injection affecting all pgx users; it is a narrowly scoped flaw requiring a non-default mode and specific application behavior",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41889",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41889",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da",
          "url": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/releases/tag/v5.9.2",
          "url": "https://github.com/jackc/pgx/releases/tag/v5.9.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx",
          "url": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx"
        }
      ],
      "release_date": "2026-05-08T15:53:00.251000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        },
        {
          "category": "workaround",
          "details": "Avoid using the non-default simple protocol in applications that use the pgx PostgreSQL driver for Go. The vulnerability is contingent on this non-default protocol and specific SQL query constructs. Configuring applications to use the default extended protocol prevents this issue. If the simple protocol is necessary, ensure that dollar-quoted string literals do not contain attacker-controlled placeholder values.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions"
    },
    {
      "cve": "CVE-2026-49478",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-06-30T18:40:39+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Fulcio\u0027s OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive cluster credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Fulcio\u0027s OIDC Discovery client. Three related vulnerabilities allow exploitation when a configured OIDC issuer is compromised or malicious: (1) Blind SSRF \u2014 the discovery client follows cross-host HTTP redirects, allowing a malicious issuer to redirect Fulcio\u0027s metadata fetch requests to internal-only systems (e.g., cloud IMDS endpoints, RFC 1918 addresses); (2) JWKS substitution \u2014 the redirected discovery flow can return a manipulated jwks_uri pointing to an attacker-controlled host, poisoning the verifier cache with attacker keys and enabling validation of attacker-controlled signatures; (3) Kubernetes ServiceAccount token leakage \u2014 the in-cluster SA token is attached globally by the HTTP transport, leaking it to third-party hosts during cross-host redirects or when wildcard MetaIssuers match external endpoints. Exploitation requires a compromised or malicious OIDC issuer already trusted in the Fulcio configuration. In typical Red Hat Trusted Artifact Signer deployments, OIDC issuers are explicitly configured and curated, reducing the attack surface.\"}]",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49478",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49478",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f5mr-q85p-6hh6",
          "url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f5mr-q85p-6hh6"
        }
      ],
      "release_date": "2026-06-30T18:40:39+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        },
        {
          "category": "workaround",
          "details": "Upgrade to Fulcio v1.8.6 or later. No workaround is available.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage"
    },
    {
      "cve": "CVE-2026-49978",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-07-14T21:05:26.253019+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a \u003ctemplate\u003e.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        }
      ],
      "release_date": "2026-07-14T20:02:46.263000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
    },
    {
      "cve": "CVE-2026-50163",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go, a Go library used for managing OCI (Open Container Initiative) artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to files outside the intended extraction location, specifically within the victim\u0027s current working directory. This allows an attacker to read sensitive information from the system, and in some cases, could lead to unauthorized access to critical system files if the component is operating with elevated privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in oras-go. The ensureLinkPath tar extraction helper validates that a hardlink\u0027s target resolves inside the extract base directory, but returns the original unresolved target string instead of the validated path. When os.Link() is called with a relative Linkname, it resolves against the process\u0027s current working directory (CWD), not the extract directory. An attacker controlling an OCI registry can craft a tarball layer with a malicious hardlink entry whose relative Linkname escapes the extract directory, creating a hardlink to arbitrary files in the victim\u0027s CWD. Exploitation requires the victim to run `oras pull` (or code using the oras-go file store) against an attacker-controlled registry with auto-extract enabled (io.deis.oras.content.unpack annotation set to true). In typical Red Hat deployments, container registries are curated and trusted, reducing the likelihood of exploitation. The resulting hardlink shares an inode with the target file, allowing the attacker to read its contents through the extracted archive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        },
        {
          "category": "workaround",
          "details": "Upgrade to oras-go v2.6.1 or later.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
          "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:55:57+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48913"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:ae9a852c7b15e5ad0bb493cf9b808be18847ce07502a5c663d087a80bd47f3c2_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:b1757ef2d73e04c7675b32149802cdf1b3a89f7953d64456436b8549cc794296_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:c19b4e2ae18ebcf75eed8adf8d70269b9013bd79b652a36aa7ddc5267f8cf8d1_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f8938440faec7bcea67d6434dfc77e20b96f76530f31d86eed62d92de17eb176_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:78cc429e1e2f1ebff70d4fb2e703423c7237a41d2a83bca8807af57f07d91967_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:bdfa798d7de5921e1fa635029fc9a8013bc7e431e2c217096cbff4415822d1df_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d249a36632ade0b88a3eaf8e4489d26835104ee46f451880d0178db74e66105a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d595dda762a290dcc82f2fd1ed0f332b84f8a279ba98a12082bd49841507da97_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:d4802a880ece2d2af9b67e047690cee05e4d9bf2819f8eeea115bbf0f695d487_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:e1eaa504db4f91a5daa9308be177e72f1871ee4ca0ad97026fa2cfdfe0e916de_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:6285a6535f012775f552442253463881d510e933ee575b5c7fda649e8df3c536_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:75be60f007da174e37b146a46f0b34c8fbee80573a916539147cc435ac48e77c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896b1a826f67e9216b7d46f35def353293c8afbe1a124cdd8ec8aab0f1c0797f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:96c59bb24164e747ad5e83d9f118b2da8c485f6a3dd4f7533a45aea91e9fb163_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:17087208e550bbf1a580a72752f20f7b41ae1103313cc1485678936dbf3b7beb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:98aadb3874793b6e9af3c198e6e36f98489e3c28812592975c9923a3a7e3f5ec_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b8614627ab29a2364c61a551c1268526886adfcb9e26aa13aed212b88960fd1a_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:fb741a4e3f0fff301230aaa29cc4bf4dc3980243df1940ad094538e6596fcb7a_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7c03d8a0fa0997be48acb3f0e4ab72161b3b106f8907f2c55baf5784d78118f4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a15bc27b2559d36723fccd0146920a31d9d9fb04a99d07bca2aaf82644d1182c_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c49fcf244af24ab354e7485561cf498072011d473575992c49516ee52b919841_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:e0de840202049bfcf9158c119bac7c683157ff6fde30ffc36972f83074d40ccb_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:06673c36a28c208d24b95ba61e41c807d4dd61de335a669acc3a6c94b57d2f4c_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4b4dd652cf5539dc053d1f07f36dc7b7e795c3d1459bf45fc73bb1c928eb222d_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:aba89f741dcd67cfbf6718476aa18d3921fd023792f6542c14e4f4e59e72eb0a_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cdc3ecb02a0f07a2573d6c20ace878fa58d53b6547d082b461033f66a0616b33_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:260215e4068708476b494bab6c69f63718c9d40c248205497beee709c0a37203_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:67ae19613df612b61395c5288fcf5fb4abc625db2067079ee1d68e691917f568_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6bea71ad5332b991175bda333d1deefbd0092977f885e4090766de7fcbd3ea28_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:800ff42a96699be7013862f6f4927eed4d96d5dea9bac70480d3b92c96798e0d_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:5b92e2664fa88f829894a1abbe735a0dea0f4bf6979b24caadeb5e132adce4a0_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:92ab6c3337d7ffd7989937e0ee04e60e6863ce170187b7eff06075acdbfad1ab_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:94d9f6790accfb09327c38838ad747204fc14530ff14b54b8a947901958925fc_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:ff0000160fb111606c00c618e2019185c046bc475b1141ddccb057a4889293e7_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:33386278169e0d2de11c0bd7dba0f41511ffe47d99114f3b8276c41e2a093010_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4c50e9530b09e68407707e290a1976237383763b5c6dcd38c92d3cdae8ebaf56_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:af0503a2cce7e0a7f1ec6256e3e3f0a230c5c50da0062af0889878d3175e14b2_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b28e9c1d76de0adff7d8201037d4684918badb7e5ec99291a03f21cd7d5bbbcf_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:71048299ca481ea2584141ef211c36ece5da6f0383bc732730e49079b55c6533_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:827fd8388e7035d628a55df763bb96808528506e771b7736f98360539f57cfb4_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:897c683623c962994756a7e3bf97755713eb755ff34304770a2f7dd65882985b_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f0bcbf612a990d788eb287ec5126a444668edc055b080bdd4ffbb339cc380ee4_arm64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:7786662d585e3e2ce7adc526f5151aa064e4dd59f764b7c9fa57836dba329d5f_s390x",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:989296dfdab92ee0483b6ed4ee4d4af80861cd34ca715951e6dd6081ff21e3a5_amd64",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bf2281fa11876c3fd2ee18363646bee567afa4397ebac0702b26bda794d8a89f_ppc64le",
            "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e8f4e8500531910422dcde17b27c82b5abfa448a339c52342280bd73803e61a8_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    }
  ]
}

CVE-2026-13149 (GCVE-0-2026-13149)

Vulnerability from cvelistv5 – Published: 2026-06-30 08:30 – Updated: 2026-07-08 11:38

Summary

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

seal

References

2 references

URL	Tags
https://github.com/juliangruber/brace-expansion/c…
https://www.npmjs.com/package/brace-expansion

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: 0 , ≤ 5.0.6 (semver)

Credits

bnbdr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13149",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T12:43:12.568372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T12:43:23.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://registry.npmjs.org",
          "defaultStatus": "unaffected",
          "packageName": "brace-expansion",
          "product": "brace-expansion",
          "repo": "https://github.com/juliangruber/brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "lessThanOrEqual": "5.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "bnbdr"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
            }
          ],
          "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-469",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-469 HTTP DoS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-407",
              "description": "CWE-407 Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T11:38:35.974Z",
        "orgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
        "shortName": "seal"
      },
      "references": [
        {
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
    "assignerShortName": "seal",
    "cveId": "CVE-2026-13149",
    "datePublished": "2026-06-30T08:30:34.502Z",
    "dateReserved": "2026-06-24T10:17:07.027Z",
    "dateUpdated": "2026-07-08T11:38:35.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41889 (GCVE-0-2026-41889)

Vulnerability from cvelistv5 – Published: 2026-05-08 15:53 – Updated: 2026-05-08 19:38

Title

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

Summary

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a string literal, and the value of that placeholder is controllable by the attacker. This issue has been patched in version 5.9.2.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/jackc/pgx/security/advisories/…	x_refsource_CONFIRM
https://github.com/jackc/pgx/commit/60644f84918a8…	x_refsource_MISC
https://github.com/jackc/pgx/releases/tag/v5.9.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jackc	pgx	Affected: < 5.9.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41889",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T19:38:09.336936Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T19:38:34.153Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pgx",
          "vendor": "jackc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 5.9.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a string literal, and the value of that placeholder is controllable by the attacker. This issue has been patched in version 5.9.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T15:53:00.251Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx"
        },
        {
          "name": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da"
        },
        {
          "name": "https://github.com/jackc/pgx/releases/tag/v5.9.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jackc/pgx/releases/tag/v5.9.2"
        }
      ],
      "source": {
        "advisory": "GHSA-j88v-2chj-qfwx",
        "discovery": "UNKNOWN"
      },
      "title": "pgx: SQL Injection via placeholder confusion with dollar quoted string literals"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41889",
    "datePublished": "2026-05-08T15:53:00.251Z",
    "dateReserved": "2026-04-22T15:11:54.671Z",
    "dateUpdated": "2026-05-08T19:38:34.153Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-49978 (GCVE-0-2026-49978)

Vulnerability from cvelistv5 – Published: 2026-07-14 20:02 – Updated: 2026-07-21 14:59

Title

DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

Summary

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside <template>.content, allowing attacker-controlled markup such as event handlers, JavaScript URLs, or scripts to survive and execute when an application cloned and inserted the sanitized template. This issue is fixed in version 3.4.7.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/cure53/DOMPurify/security/advi…	x_refsource_CONFIRM
https://github.com/cure53/DOMPurify/commit/ca30f0…	x_refsource_MISC
https://github.com/cure53/DOMPurify/releases/tag/3.4.7	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
cure53	DOMPurify	Affected: < 3.4.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49978",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T14:59:10.987336Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:59:20.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DOMPurify",
          "vendor": "cure53",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.4.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside \u003ctemplate\u003e.content, allowing attacker-controlled markup such as event handlers, JavaScript URLs, or scripts to survive and execute when an application cloned and inserted the sanitized template. This issue is fixed in version 3.4.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T20:02:46.263Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        },
        {
          "name": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "name": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        }
      ],
      "source": {
        "advisory": "GHSA-rp9w-3fw7-7cwq",
        "discovery": "UNKNOWN"
      },
      "title": "DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside \u003ctemplate\u003e.content"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-49978",
    "datePublished": "2026-07-14T20:02:46.263Z",
    "dateReserved": "2026-06-02T18:30:51.281Z",
    "dateUpdated": "2026-07-21T14:59:20.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50163 (GCVE-0-2026-50163)

Vulnerability from cvelistv5 – Published: 2026-07-17 19:36 – Updated: 2026-07-20 15:01

Title

oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction

Summary

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link("victim.secret", "<extract_base>/payload.tar.gz/evil_cwd_link") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname="victim.secret" with io.deis.oras.content.unpack: "true", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

GitHub_M

References

4 references

URL	Tags
https://github.com/oras-project/oras-go/security/…	x_refsource_CONFIRM
https://github.com/oras-project/oras-go/pull/1232	x_refsource_MISC
https://github.com/oras-project/oras-go/commit/c4…	x_refsource_MISC
https://github.com/oras-project/oras-go/releases/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
oras-project	oras-go	Affected: < 2.6.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50163",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T15:00:48.168210Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T15:01:16.630Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "oras-go",
          "vendor": "oras-project",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.6.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link(\"victim.secret\", \"\u003cextract_base\u003e/payload.tar.gz/evil_cwd_link\") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname=\"victim.secret\" with io.deis.oras.content.unpack: \"true\", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-17T19:36:01.254Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
        },
        {
          "name": "https://github.com/oras-project/oras-go/pull/1232",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/pull/1232"
        },
        {
          "name": "https://github.com/oras-project/oras-go/commit/c463c654ab3ef34422c1764cd619806cebf20451",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/commit/c463c654ab3ef34422c1764cd619806cebf20451"
        },
        {
          "name": "https://github.com/oras-project/oras-go/releases/tag/v2.6.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/releases/tag/v2.6.2"
        }
      ],
      "source": {
        "advisory": "GHSA-fxhp-mv3v-67qp",
        "discovery": "UNKNOWN"
      },
      "title": "oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-50163",
    "datePublished": "2026-07-17T19:36:01.254Z",
    "dateReserved": "2026-06-03T20:54:20.432Z",
    "dateUpdated": "2026-07-20T15:01:16.630Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-53492 (GCVE-0-2026-53492)

Vulnerability from cvelistv5 – Published: 2026-07-01 17:59 – Updated: 2026-07-02 12:50

Title

containerd CRI checkpoint restore CDI annotation smuggling

Summary

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-863 - Incorrect Authorization

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/containerd/containerd/security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
containerd	containerd	Affected: >= 2.1.0, < 2.1.9 Affected: >= 2.2.0, < 2.2.5 Affected: >= 2.3.0, < 2.3.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53492",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-02T12:50:36.308393Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-02T12:50:43.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "containerd",
          "vendor": "containerd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.1.0, \u003c 2.1.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.2.0, \u003c 2.2.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.3.0, \u003c 2.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod\u0027s create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T17:59:12.552Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "source": {
        "advisory": "GHSA-33vj-92qq-66hc",
        "discovery": "UNKNOWN"
      },
      "title": "containerd CRI checkpoint restore CDI annotation smuggling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-53492",
    "datePublished": "2026-07-01T17:59:12.552Z",
    "dateReserved": "2026-06-09T17:05:25.059Z",
    "dateUpdated": "2026-07-02T12:50:43.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59869 (GCVE-0-2026-59869)

Vulnerability from cvelistv5 – Published: 2026-07-08 15:15 – Updated: 2026-07-09 15:14

Title

js-yaml: YAML merge-key chains can force quadratic CPU consumption

Summary

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M

References

5 references

URL	Tags
https://github.com/nodeca/js-yaml/security/adviso…	x_refsource_CONFIRM
https://github.com/nodeca/js-yaml/commit/24f13e79…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/59423c6f…	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
nodeca	js-yaml	Affected: >= 3.0.0, < 3.15.0 Affected: >= 4.0.0, < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59869",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T15:14:16.302841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T15:14:29.753Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "js-yaml",
          "vendor": "nodeca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.15.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T15:15:54.675Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-52cp-r559-cp3m",
        "discovery": "UNKNOWN"
      },
      "title": "js-yaml: YAML merge-key chains can force quadratic CPU consumption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-59869",
    "datePublished": "2026-07-08T15:15:54.675Z",
    "dateReserved": "2026-07-07T15:41:53.607Z",
    "dateUpdated": "2026-07-09T15:14:29.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

RHSA-2026:48913

CVE-2026-13149 (GCVE-0-2026-13149)

CVE-2026-41889 (GCVE-0-2026-41889)

CVE-2026-49978 (GCVE-0-2026-49978)

CVE-2026-50163 (GCVE-0-2026-50163)

CVE-2026-53492 (GCVE-0-2026-53492)

CVE-2026-59869 (GCVE-0-2026-59869)

Tags

Sightings

Nomenclature